mkt.rfmsomnii.com

Issued by R3

About this certificate

This digital certificate with serial number 03:57:95:38:a5:76:3b:e3:e4:fb:87:89:6d:b5:f3:c8:be:11 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.rfmsomnii.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:95:38:a5:76:3b:e3:e4:fb:87:89:6d:b5:f3:c8:be:11
Serial Number (int): 291139772813363459578883935295825479515665
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:0c:23:e0:e2:8d:10:2c:2a:a4:17:0a:72:98:96:74:82:74:43:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:8f:2b:b6:66:f6:41:f7:d3:fc:5d:91:1e:3b:ce:08:01:09:3f:89
Fingerprint (sha256): bf:25:20:6b:20:78:35:19:0b:7a:e7:84:49:2f:86:44:11:e7:5a:cd:da:79:63:96:b9:8e:ec:74:60:84:cb:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.rfmsomnii.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.rfmsomnii.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunic.piracanjuba.com.br
comunicacao.arsnorte.min-saude.pt
comunicacao.ipdj.pt
cursodepaineldeled.newtonmaximo.com.br
ebook.escoladoautismo.com.br
expansao.tudobemseguros.com.br
faturadigital.cm-mertola.pt
mkt.advise2achieve.com
mkt.aerotexextintores.com.br
mkt.afabricadevendas.com.br
mkt.agenciacanopus.com.br
mkt.aldeiadoscapuchos.pt
mkt.alternativemedia.pt
mkt.amifrigo.pt
mkt.amorfizbolo.com
mkt.armilarworld.es
mkt.arsnorte.min-saude.pt
mkt.assistenciafeminina.com.br
mkt.babyliberdade.com
mkt.blocomais.com.br
mkt.bolinhodemelgourmet.com.br
mkt.canalcooperativo.com.br
mkt.cenertec.pt
mkt.chipbelem.com.br
mkt.cm-alandroal.pt
mkt.conhecimentopartilhado.com.br
mkt.contabilistaplay.com.br
mkt.contatosdigital.com.br
mkt.creativeeye.pt
mkt.crja.com.br
mkt.czarlisbonhotel.com
mkt.deltabusiness.com
mkt.dermadoctor.com.br
mkt.designtimecoworking.com
mkt.dott.pt
mkt.elyanagoncalves.com.br
mkt.enterfix.com.br
mkt.eseguro.com.br
mkt.estudiodeimpacto.pt
mkt.fator5.net
mkt.fechometalusa.com
mkt.filipengine.pt
mkt.franco.pt
mkt.frutaimperfeita.com.br
mkt.fsdown.org.br
mkt.hospitalsantacruz.com.br
mkt.ifoodcorp.com.br
mkt.ihomeimoveis.com.br
mkt.impressmarketingdigital.com.br
mkt.inboundbox.es
mkt.info.badireto.pt
mkt.infolk.ga
mkt.kingwine.com.br
mkt.linavet.com.br
mkt.lisbondigitalschool.com
mkt.lisdente.pt
mkt.lmobile.pt
mkt.lotusfineart.com.br
mkt.madersilva.com.br
mkt.magicway.com.br
mkt.massucatotreinamentos.com
mkt.miloandreo.com.br
mkt.miolito.com
mkt.miudo.pt
mkt.mstore.pt
mkt.multiplicadordigital.com
mkt.nortemed.pt
mkt.novatronica.com
mkt.online.arcadia.pt
mkt.pajunet.com.br
mkt.pestanagolf.com
mkt.portalconhecer.com.br
mkt.precisaassessoria.com.br
mkt.printstore.com.br
mkt.programadorespartano.com.br
mkt.quintadolorde.pt
mkt.quintamachados.com
mkt.radiantecentroeducacional.com.br
mkt.radiotransmundial.org
mkt.rafaelpiloto.com
mkt.rd7comunica.com
mkt.rfmsomnii.com
mkt.rfontes.com
mkt.ricardomendoza.pt
mkt.sanahotels.com
mkt.sitiodobem.com.br
mkt.spaceappsbh.com
mkt.spatiacomporta.com
mkt.speednetworking.com.pt
mkt.staples-mail.pt
mkt.tabataamaral.com.br
mkt.tecvoz.com.br
mkt.tempus.pt
mkt.totumsport.es
mkt.tradumundi.com
mkt.wififi.com.br
mkt.xtreme.pt
mkt.zucchetti-spain.es
news.meamo.com.br
ofertas.estiloeconforto.com.br

Other certificates including the domain name rfmsomnii.com

(limited to 100 certificates)
mkt.multienergy.com.br
mkt.agrobrasilia.com.br
rfmsomnii.com
egoi.novatronica.com
rfmsomnii.com
mkt.agrobrasilia.com.br
mkt.rfmsomnii.com
rfmsomnii.com
rfmsomnii.com
mkt.batistacarioca.com.br
mkt.nutriestilo.com.br
rfmsomnii.com
mkt.algarveraceresort.com
rfmsomnii.com
mkt.dohlerhomes.pt
rfmsomnii.com
rfmsomnii.com
mkt.estudodoaudio.com.br
egoi.novatronica.com
mkt.estudodoaudio.com.br
mkt.castelomagico.pt
mkt.dohlerhomes.pt
mkt.castelomagico.pt
mkt.rfmsomnii.com
rfmsomnii.com
mkt.batistacarioca.com.br
rfmsomnii.com
mkt.multienergy.com.br
rfmsomnii.com
mkt.algarveraceresort.com
mkt.direcionalcontabeis.com.br
rfmsomnii.com
mkt.direcionalcontabeis.com.br

Certificate

The complete raw certificate details for mkt.rfmsomnii.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINYTCCDEmgAwIBAgISA1eVOKV2O+Pk+4eJbbXzyL4RMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMDEwMzE2NTlaFw0yMzAxMzAwMzE2NThaMBwxGjAYBgNVBAMT
EW1rdC5yZm1zb21uaWkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0oUHTabmLmbvM/0RvX+vLOUjjDeklF2X7TupeBwbqRDEtCcETkNLXGuO5xvr
g5I5LS0HTQsVo5X6HcGcDJAdyEf7BTVJ91q8SWbj5NTdPefgf6gQAH76mx9G5aYG
lj3ZQp6/yycmMzxJoehTQ8+mqqPxqvGNXwV2oYZJB4Z+1paqy+03w63RoFwZ72JC
OJDuZuTxbw5qiw3+yzc+wHxzKebn2TtX8uhp/dA6qj8NRwKblGOSXcjCWcoyWR+o
kNAd18x/Z5AXmB+vrZn1RLE2SfeSKT6sr7OxytpXiXGa8BlUDQcZH0/QxWoNI6Eq
Yw3wnxLJKTHxoM+O6Me2Uo9Z+QIDAQABo4IKhTCCCoEwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTtDCPg4o0QLCqkFwpymJZ0gnRDFjAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCCUYGA1UdEQSCCT0wggk5ghpjb211bmljLnBpcmFjYW5qdWJhLmNvbS5i
coIhY29tdW5pY2FjYW8uYXJzbm9ydGUubWluLXNhdWRlLnB0ghNjb211bmljYWNh
by5pcGRqLnB0giZjdXJzb2RlcGFpbmVsZGVsZWQubmV3dG9ubWF4aW1vLmNvbS5i
coIcZWJvb2suZXNjb2xhZG9hdXRpc21vLmNvbS5icoIeZXhwYW5zYW8udHVkb2Jl
bXNlZ3Vyb3MuY29tLmJyghtmYXR1cmFkaWdpdGFsLmNtLW1lcnRvbGEucHSCFm1r
dC5hZHZpc2UyYWNoaWV2ZS5jb22CHG1rdC5hZXJvdGV4ZXh0aW50b3Jlcy5jb20u
YnKCG21rdC5hZmFicmljYWRldmVuZGFzLmNvbS5icoIZbWt0LmFnZW5jaWFjYW5v
cHVzLmNvbS5icoIYbWt0LmFsZGVpYWRvc2NhcHVjaG9zLnB0ghdta3QuYWx0ZXJu
YXRpdmVtZWRpYS5wdIIPbWt0LmFtaWZyaWdvLnB0ghNta3QuYW1vcmZpemJvbG8u
Y29tghNta3QuYXJtaWxhcndvcmxkLmVzghlta3QuYXJzbm9ydGUubWluLXNhdWRl
LnB0gh5ta3QuYXNzaXN0ZW5jaWFmZW1pbmluYS5jb20uYnKCFW1rdC5iYWJ5bGli
ZXJkYWRlLmNvbYIUbWt0LmJsb2NvbWFpcy5jb20uYnKCHm1rdC5ib2xpbmhvZGVt
ZWxnb3VybWV0LmNvbS5icoIbbWt0LmNhbmFsY29vcGVyYXRpdm8uY29tLmJygg9t
a3QuY2VuZXJ0ZWMucHSCFG1rdC5jaGlwYmVsZW0uY29tLmJyghNta3QuY20tYWxh
bmRyb2FsLnB0giFta3QuY29uaGVjaW1lbnRvcGFydGlsaGFkby5jb20uYnKCG21r
dC5jb250YWJpbGlzdGFwbGF5LmNvbS5icoIabWt0LmNvbnRhdG9zZGlnaXRhbC5j
b20uYnKCEm1rdC5jcmVhdGl2ZWV5ZS5wdIIPbWt0LmNyamEuY29tLmJyghdta3Qu
Y3phcmxpc2JvbmhvdGVsLmNvbYIVbWt0LmRlbHRhYnVzaW5lc3MuY29tghZta3Qu
ZGVybWFkb2N0b3IuY29tLmJyghtta3QuZGVzaWdudGltZWNvd29ya2luZy5jb22C
C21rdC5kb3R0LnB0ghpta3QuZWx5YW5hZ29uY2FsdmVzLmNvbS5icoITbWt0LmVu
dGVyZml4LmNvbS5icoISbWt0LmVzZWd1cm8uY29tLmJyghdta3QuZXN0dWRpb2Rl
aW1wYWN0by5wdIIObWt0LmZhdG9yNS5uZXSCFW1rdC5mZWNob21ldGFsdXNhLmNv
bYISbWt0LmZpbGlwZW5naW5lLnB0gg1ta3QuZnJhbmNvLnB0ghpta3QuZnJ1dGFp
bXBlcmZlaXRhLmNvbS5icoIRbWt0LmZzZG93bi5vcmcuYnKCHG1rdC5ob3NwaXRh
bHNhbnRhY3J1ei5jb20uYnKCFG1rdC5pZm9vZGNvcnAuY29tLmJyghdta3QuaWhv
bWVpbW92ZWlzLmNvbS5icoIibWt0LmltcHJlc3NtYXJrZXRpbmdkaWdpdGFsLmNv
bS5icoIRbWt0LmluYm91bmRib3guZXOCFG1rdC5pbmZvLmJhZGlyZXRvLnB0gg1t
a3QuaW5mb2xrLmdhghNta3Qua2luZ3dpbmUuY29tLmJyghJta3QubGluYXZldC5j
b20uYnKCG21rdC5saXNib25kaWdpdGFsc2Nob29sLmNvbYIPbWt0Lmxpc2RlbnRl
LnB0gg5ta3QubG1vYmlsZS5wdIIXbWt0LmxvdHVzZmluZWFydC5jb20uYnKCFW1r
dC5tYWRlcnNpbHZhLmNvbS5icoITbWt0Lm1hZ2ljd2F5LmNvbS5icoIdbWt0Lm1h
c3N1Y2F0b3RyZWluYW1lbnRvcy5jb22CFW1rdC5taWxvYW5kcmVvLmNvbS5icoIP
bWt0Lm1pb2xpdG8uY29tggxta3QubWl1ZG8ucHSCDW1rdC5tc3RvcmUucHSCHG1r
dC5tdWx0aXBsaWNhZG9yZGlnaXRhbC5jb22CD21rdC5ub3J0ZW1lZC5wdIITbWt0
Lm5vdmF0cm9uaWNhLmNvbYIVbWt0Lm9ubGluZS5hcmNhZGlhLnB0ghJta3QucGFq
dW5ldC5jb20uYnKCE21rdC5wZXN0YW5hZ29sZi5jb22CGW1rdC5wb3J0YWxjb25o
ZWNlci5jb20uYnKCHG1rdC5wcmVjaXNhYXNzZXNzb3JpYS5jb20uYnKCFW1rdC5w
cmludHN0b3JlLmNvbS5icoIfbWt0LnByb2dyYW1hZG9yZXNwYXJ0YW5vLmNvbS5i
coIUbWt0LnF1aW50YWRvbG9yZGUucHSCFm1rdC5xdWludGFtYWNoYWRvcy5jb22C
JG1rdC5yYWRpYW50ZWNlbnRyb2VkdWNhY2lvbmFsLmNvbS5icoIZbWt0LnJhZGlv
dHJhbnNtdW5kaWFsLm9yZ4IUbWt0LnJhZmFlbHBpbG90by5jb22CE21rdC5yZDdj
b211bmljYS5jb22CEW1rdC5yZm1zb21uaWkuY29tgg9ta3QucmZvbnRlcy5jb22C
FW1rdC5yaWNhcmRvbWVuZG96YS5wdIISbWt0LnNhbmFob3RlbHMuY29tghVta3Qu
c2l0aW9kb2JlbS5jb20uYnKCE21rdC5zcGFjZWFwcHNiaC5jb22CFm1rdC5zcGF0
aWFjb21wb3J0YS5jb22CGm1rdC5zcGVlZG5ldHdvcmtpbmcuY29tLnB0ghNta3Qu
c3RhcGxlcy1tYWlsLnB0ghdta3QudGFiYXRhYW1hcmFsLmNvbS5icoIRbWt0LnRl
Y3Zvei5jb20uYnKCDW1rdC50ZW1wdXMucHSCEW1rdC50b3R1bXNwb3J0LmVzghJt
a3QudHJhZHVtdW5kaS5jb22CEW1rdC53aWZpZmkuY29tLmJygg1ta3QueHRyZW1l
LnB0ghZta3QuenVjY2hldHRpLXNwYWluLmVzghFuZXdzLm1lYW1vLmNvbS5icoIe
b2ZlcnRhcy5lc3RpbG9lY29uZm9ydG8uY29tLmJyMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBsiaBEEZbsviGNNNKpt/WFv5h4q5qRIUYN+xoDUHu78SHiQy8tmzVXcpeC
kYhLulz4VmgxoMz6NO0x5Vd7W5Zh6AfHTQJ0Vj7P1GMG3nnS1a97KvCP9dsvyUEr
PoBt+Jl4eFsLNneZMcO4uS3TBr3Ze48ptt4RZTWd7JbwAiCBit6dFawM8PELGwGk
J3dsP4GkSZf4JPP4axkwALTPAJpV4C/xjDnQmPARxKL31TMfsfepVnG0BGHO8+fC
rTwMmwhKoy1iP5q+h+ZUzvzJA6c9PaNdi4u7eOVzcczjK7/y6x/LGHK37/tn1Qk/
tiY1rclBQa9EViVLOv+BqjFG9jQG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oUHTabmLmbvM/0RvX+v
LOUjjDeklF2X7TupeBwbqRDEtCcETkNLXGuO5xvrg5I5LS0HTQsVo5X6HcGcDJAd
yEf7BTVJ91q8SWbj5NTdPefgf6gQAH76mx9G5aYGlj3ZQp6/yycmMzxJoehTQ8+m
qqPxqvGNXwV2oYZJB4Z+1paqy+03w63RoFwZ72JCOJDuZuTxbw5qiw3+yzc+wHxz
Kebn2TtX8uhp/dA6qj8NRwKblGOSXcjCWcoyWR+okNAd18x/Z5AXmB+vrZn1RLE2
SfeSKT6sr7OxytpXiXGa8BlUDQcZH0/QxWoNI6EqYw3wnxLJKTHxoM+O6Me2Uo9Z
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291139772813363459578883935295825479515665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-01 03:16:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 03:16:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.rfmsomnii.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26575642855238379922145356991250101184403202435739348376431344781724623737938037437533289431565359799891743334376285955919610346041163326889978982986680100112291578321945637316295790540695869928357851473469174637773180438870099818660383578369688975137920978157635234153462595685761122915739188467367406568974037985590850021280141347928548042238200315465284391793768356721471479582414219799986448273307259069757446192313283418132864561376141190561312069337536920772567734490094580493646649775500719018808190649910322308145229211622224292936715546060049554584400643697490619108158582977796061352740200353848381269826041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed0c23e0e28d102c2aa4170a7298967482744316
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunic.piracanjuba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.ipdj.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursodepaineldeled.newtonmaximo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.escoladoautismo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expansao.tudobemseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faturadigital.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advise2achieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aerotexextintores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afabricadevendas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agenciacanopus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aldeiadoscapuchos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alternativemedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amifrigo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amorfizbolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armilarworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.assistenciafeminina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.babyliberdade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blocomais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bolinhodemelgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canalcooperativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenertec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chipbelem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-alandroal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conhecimentopartilhado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contabilistaplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contatosdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.creativeeye.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.czarlisbonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deltabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dermadoctor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designtimecoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dott.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elyanagoncalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.enterfix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estudiodeimpacto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fator5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fechometalusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.filipengine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.franco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.frutaimperfeita.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fsdown.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hospitalsantacruz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ihomeimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.impressmarketingdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inboundbox.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.info.badireto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infolk.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingwine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linavet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisbondigitalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisdente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lmobile.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusfineart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.madersilva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.magicway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.massucatotreinamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miloandreo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miolito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miudo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mstore.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multiplicadordigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nortemed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.online.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pajunet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pestanagolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portalconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.precisaassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.printstore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.programadorespartano.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintadolorde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintamachados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiantecentroeducacional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiotransmundial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rafaelpiloto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rd7comunica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfmsomnii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfontes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ricardomendoza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sitiodobem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spaceappsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spatiacomporta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speednetworking.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.staples-mail.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tabataamaral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecvoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tempus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.totumsport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tradumundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wififi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xtreme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zucchetti-spain.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.meamo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertas.estiloeconforto.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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