mkt.castelomagico.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:68:73:08:42:c7:7e:0d:29:28:d6:c1:c4:c5:12:00:f6:23 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.castelomagico.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:73:08:42:c7:7e:0d:29:28:d6:c1:c4:c5:12:00:f6:23
Serial Number (int): 383991413999153169593683889296158987712035
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:d4:b4:ba:c3:f1:57:e6:37:f2:72:20:40:c1:56:47:56:89:78:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:25:1b:97:df:a3:3b:7e:69:13:66:6a:d5:f3:cf:4d:f9:ba:dc:67
Fingerprint (sha256): b0:27:1b:af:94:38:c0:f9:6d:b0:1d:c8:97:5e:a8:2a:12:1e:a1:71:a0:92:0c:b5:ca:96:b0:b9:71:32:83:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.castelomagico.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.castelomagico.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunic.piracanjuba.com.br
comunicacao.arsnorte.min-saude.pt
egoi.agavetadodinheiro.com.br
expansao.tudobemseguros.com.br
faturadigital.cm-mertola.pt
mkt.acetiimoveis.com.br
mkt.advise2achieve.com
mkt.aerotexextintores.com.br
mkt.afabricadevendas.com.br
mkt.agenciacanopus.com.br
mkt.aldeiadoscapuchos.pt
mkt.alternativemedia.pt
mkt.amifrigo.pt
mkt.amorfizbolo.com
mkt.armilarworld.es
mkt.arsnorte.min-saude.pt
mkt.assistenciafeminina.com.br
mkt.babyliberdade.com
mkt.blocomais.com.br
mkt.bolinhodemelgourmet.com.br
mkt.canalcooperativo.com.br
mkt.carteira.estudantesdobrasil.org.br
mkt.castelomagico.pt
mkt.cenaescoladeatores.com
mkt.chipbelem.com.br
mkt.cloudbasesport.com.br
mkt.colegiolatosensu.com.br
mkt.comoempreendernanet.com
mkt.conhecimentopartilhado.com.br
mkt.contabilistaplay.com.br
mkt.contatosdigital.com.br
mkt.creativeeye.pt
mkt.crja.com.br
mkt.czarlisbonhotel.com
mkt.dermadoctor.com.br
mkt.designtimecoworking.com
mkt.elyanagoncalves.com.br
mkt.escolhaempreender.com
mkt.eseguro.com.br
mkt.estudiodeimpacto.pt
mkt.fator5.net
mkt.fechometalusa.com
mkt.franco.pt
mkt.frutaimperfeita.com.br
mkt.fsdown.org.br
mkt.gencorio.com.br
mkt.ifoodcorp.com.br
mkt.ihomeimoveis.com.br
mkt.info.badireto.pt
mkt.infolk.ga
mkt.jtec.com.br
mkt.kingwine.com.br
mkt.linavet.com.br
mkt.lisbondigitalschool.com
mkt.lisdente.pt
mkt.lmobile.pt
mkt.lotusfineart.com.br
mkt.magicway.com.br
mkt.massucatotreinamentos.com
mkt.milacozzi.com.br
mkt.miloandreo.com.br
mkt.miolito.com
mkt.miudo.pt
mkt.mstore.pt
mkt.nortemed.pt
mkt.novatronica.com
mkt.ocursodetarot.com
mkt.online.arcadia.pt
mkt.oxfordjeans.com
mkt.pajunet.com.br
mkt.pedemeia.pt
mkt.pestanagolf.com
mkt.phrlegal.com
mkt.planum.io
mkt.portalconhecer.com.br
mkt.programadorespartano.com.br
mkt.quintadolorde.pt
mkt.quintamachados.com
mkt.radiantecentroeducacional.com.br
mkt.rafaelpiloto.com
mkt.rd7comunica.com
mkt.realup.com.br
mkt.regimecomsaude.com
mkt.rfmsomnii.com
mkt.rfontes.com
mkt.ricardomendoza.pt
mkt.sanahotels.com
mkt.shake4u.com.br
mkt.sitiodobem.com.br
mkt.spaceappsbh.com
mkt.spatiacomporta.com
mkt.speednetworking.com.pt
mkt.staples-mail.pt
mkt.tabataamaral.com.br
mkt.tecvoz.com.br
mkt.tempus.pt
mkt.totumsport.es
mkt.xtreme.pt
mkt.zucchetti-spain.es
ofertas.estiloeconforto.com.br

Other certificates including the domain name castelomagico.pt

(limited to 100 certificates)
mkt.multienergy.com.br
castelomagico.pt
mkt.agrobrasilia.com.br
egoi.novatronica.com
*.castelomagico.pt
mkt.agrobrasilia.com.br
mkt.batistacarioca.com.br
castelomagico.pt
mkt.nutriestilo.com.br
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
castelomagico.pt
castelomagico.pt
castelomagico.pt
mkt.estudodoaudio.com.br
egoi.novatronica.com
mkt.estudodoaudio.com.br
*.castelomagico.pt
mkt.castelomagico.pt
castelomagico.pt
*.castelomagico.pt
castelomagico.pt
mkt.dohlerhomes.pt
castelomagico.pt
mkt.castelomagico.pt
castelomagico.pt
mkt.batistacarioca.com.br
mkt.multienergy.com.br
castelomagico.pt
mkt.algarveraceresort.com
mkt.direcionalcontabeis.com.br
mkt.direcionalcontabeis.com.br

Certificate

The complete raw certificate details for mkt.castelomagico.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2QXOi6sW+krohovBfL
kjav9iuqn/xkYADRamTF/46r2FJupNo/9z7ar+516+HVwZ9XiriQqUgzIxI5yXPA
dP5cN9TlvGAH1AdjTcoBiGlk1fF2kJ9K4CIFtXNBnmTq0DC3WqFDgdJr2V3PUk6R
J9wPSLqv0q6LdMcsVUsaPhFBL9wNJKozSJeGTopXuFS39JeARaQdwRUBatOYaMBC
pCc42dGeCLEjs6pLlhOn9lOfpqGCS23uRa9KhuxEwIhAi6FOPiP6AC0Cb7rTNYeS
iLGPPqyeKThhUpIhU81DY3UY8E/v3T//DVM7cbxkqf9uRVbuG8gaD7ypoIOsCRPw
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383991413999153169593683889296158987712035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 19:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 19:41:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.castelomagico.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22508666477296297764068161745980038308438745690739781850147972248064219227856780154874915408813998355129450490679268223626116348853226524554539661128953990622168600027949299773424058375737789949461350341978785948122907682268704475190023068542431560873648927954334765367140236126895721206079291559987673797063235222997834832104571246039845287788634667652588691993528657528416829942713791936780585808404495890132615835544062395089809116863584061337719711354288552115478061068508653411857990336635742913251827785521043821697104193769488244397782490387753600423484666101557446461707175375871154904354060331528152392397017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ed4b4bac3f157e637f2722040c1564756897840
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunic.piracanjuba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.agavetadodinheiro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expansao.tudobemseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faturadigital.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acetiimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advise2achieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aerotexextintores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afabricadevendas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agenciacanopus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aldeiadoscapuchos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alternativemedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amifrigo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amorfizbolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armilarworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.assistenciafeminina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.babyliberdade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blocomais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bolinhodemelgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canalcooperativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carteira.estudantesdobrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castelomagico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenaescoladeatores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chipbelem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cloudbasesport.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.colegiolatosensu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comoempreendernanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conhecimentopartilhado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contabilistaplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contatosdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.creativeeye.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.czarlisbonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dermadoctor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designtimecoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elyanagoncalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escolhaempreender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estudiodeimpacto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fator5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fechometalusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.franco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.frutaimperfeita.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fsdown.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gencorio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ihomeimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.info.badireto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infolk.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jtec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingwine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linavet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisbondigitalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisdente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lmobile.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusfineart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.magicway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.massucatotreinamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.milacozzi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miloandreo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miolito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miudo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mstore.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nortemed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ocursodetarot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.online.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oxfordjeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pajunet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pedemeia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pestanagolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.phrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.planum.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portalconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.programadorespartano.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintadolorde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintamachados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiantecentroeducacional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rafaelpiloto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rd7comunica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.regimecomsaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfmsomnii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfontes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ricardomendoza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shake4u.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sitiodobem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spaceappsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spatiacomporta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speednetworking.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.staples-mail.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tabataamaral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecvoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tempus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.totumsport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xtreme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zucchetti-spain.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertas.estiloeconforto.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007bd51855273caecf2f0726795c1fd7973ad667c3eef1abbbd87a1d80356926b35f7aa30097f1e4fae6919ad5215f1c2ca7d4e82f50703e0a9c7b2c1759135088aa8f31597d99df983f388d793fcc1d8917015f772c0c43ae10e0b82b77a697af14c5b16f73d493111b43392a75f8a906d9e4fa854c6e71d228a205735bf6bfee1b34a1c3aa8e6992614c3358f5c469e86e6fa270fa0312c3ff5b4b2a322126bad6db597a9a51a84b89299e312831207409861aedf8cc69f179b844d741e9900c7f885145366c288157939e840537a6cc3cfa62bc294efba987197ce5a741dd5a0e0d5592f71084755fc9fb5d5815adba09e46140fbd788fff6d250f03739a331