campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:cc:55:19:8b:82:fd:60:10:54:22:52:ed:0b:5a:f9:fc:c1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:55:19:8b:82:fd:60:10:54:22:52:ed:0b:5a:f9:fc:c1
Serial Number (int): 330867577663848379582197554936711877360833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:a2:05:df:f8:ec:93:14:b9:fc:6b:b6:c3:f3:28:de:40:2d:85:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:c1:81:6b:30:1b:50:17:d7:8d:c7:78:dd:f7:bc:2b:6b:b1:cb:cd
Fingerprint (sha256): c9:a8:de:90:38:31:b2:46:72:6c:11:96:9f:2b:4b:f9:12:92:45:36:84:e6:85:84:af:f1:bb:76:21:7a:ce:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
com.mapamental.org
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
gstar.cadalist.com.br
info.trademidia.com
marketing.severinomelo.com.br
mkt.acountia.pt
mkt.admancriativa.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.celvitae.com
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.conversacionesconbarriguitas.com
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.ferramentasdecoaching.com
mkt.gloma.pt
mkt.grupojpm.pt
mkt.hoteisnet.net
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.julianafonte.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.megaturviagens.com.br
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.npibrasil.com
mkt.olicargo.com
mkt.omnibees.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.sucessoemvendas.pt
mkt.tejobrinde.pt
mkt.tresce.com
mkt.uaume.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.xzconsultores.pt
mkt.youline.com.br
mkt.youup.pt
mkt.yunit.pt
mkt.zantia.com
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.musicanocoracao.pt
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.empregosmanager.pt
newsletter.igoldenvisa.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pendrives.pt
newsletter.pinayas.com
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINljCCDH6gAwIBAgISA8xVGYuC/WAQVCJS7Qta+fzBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMDEwMjEzMzNaFw0yMjA1MzAwMjEzMzJaMB8xHTAbBgNVBAMT
FGNhbXBhbmhhcy5yaXNlbWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzZQFHb6TjwefGdDvczc7EYdPFxSUwEJUCkM88ey6KunjrT2bsAxkGDyg
rIDDl1Zy7VmR8bYIP0EVUFdSVr+VnJC4gpolhzn7c2pWjIodlj4OD63WIFWaaoQ8
OpUqXVGtnuAMGC5Dr88/No6yfimAv7nwthRiLqPocRmNUCTsx0ck5V15qUbh91XA
wheQskUmcZhsxQ29HdSU+suLzt8EnjCI/H41/9XTx7cgGxqNXzPOISASOVhno/VJ
Hza853o/JeXTm3y+5EpKN1XbNwObLQTMpoy+EbAnLoK7ImGRLYmnv6B+Cit1vwnU
/5P8oTyGJ7EMbejRUrcoc43BmK8/kwIDAQABo4IKtzCCCrMwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBSSogXf+OyTFLn8a7bD8yjeQC2FKTAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCCIYGA1UdEQSCCH0wggh5ghRjYW1wYW5oYXMucmlzZW1hLmNvbYIS
Y29tLm1hcGFtZW50YWwub3JnghRlZ29pLmluZm8uYXNwYXJ0cy5wdIIWZWdvaS5p
bmZvLmF1dG9zdWVjby5wdIIUZWdvaS5pbmZvLmJpb3NhZmUucHSCEmVnb2kuaW5m
by5ub3JzLmNvbYIVZWdvaS5pbmZvLm9uZWRyaXZlLnB0ghVlZ29pLmluZm8udG9w
dHJ1Y2sucHSCDWVudmlvcy5pb2wucHSCFWdzdGFyLmNhZGFsaXN0LmNvbS5icoIT
aW5mby50cmFkZW1pZGlhLmNvbYIdbWFya2V0aW5nLnNldmVyaW5vbWVsby5jb20u
YnKCD21rdC5hY291bnRpYS5wdIIYbWt0LmFkbWFuY3JpYXRpdmEuY29tLmJyghNt
a3QuYXJtYXplbnNyZWlzLnB0gg1ta3QuYXRyLmNvLnB0ghNta3QuYnJhc2lsYmlu
Z28uY29tghRta3QuYnV6aW9zLnJqLmdvdi5icoIWbWt0LmNhYm9mcmlvLnJqLmdv
di5icoIQbWt0LmNlbHZpdGFlLmNvbYIXbWt0LmNpYWRvc2JvdG9lcy5jb20uYnKC
E21rdC5jbGlja3N1bW1pdC5vcmeCGW1rdC5jbGluaWNhZGFlZHVjYWNhby5jb22C
E21rdC5jb25hcm9tYS5jb20uYnKCJG1rdC5jb252ZXJzYWNpb25lc2NvbmJhcnJp
Z3VpdGFzLmNvbYIRbWt0LmNzb3V0ZG9vcnMucHSCD21rdC5lYWNyLmNvbS5icoIS
bWt0LmVyZ29tZXRyaWNhLnB0ghZta3QuZXNwYWNvdml0YWwuY29tLmJyghRta3Qu
ZXNwdW1hZGVzYWJhby5wdIIQbWt0LmV1cm9jdXBvbi5wdIIdbWt0LmZlcnJhbWVu
dGFzZGVjb2FjaGluZy5jb22CDG1rdC5nbG9tYS5wdIIPbWt0LmdydXBvanBtLnB0
ghFta3QuaG90ZWlzbmV0Lm5ldIINbWt0LmljY2pwLmNvbYIKbWt0Lmludi5wdIIT
bWt0LmpvZ291Z2FuaG91LmNvbYIXbWt0Lmp1ZGljZW9ubGluZS5jb20uYnKCF21r
dC5qdWxpYW5hZm9udGUuY29tLmJyghZta3QubGF5b3V0Y3JpYXRpdm8uY29tghZt
a3QubGlua2VkcG9ydHVnYWwuY29tghJta3QubWFtY2FydC5jb20uYnKCD21rdC5t
YXJrYW1vcy5wdIIRbWt0Lm1lZGlhcGFjay5jb22CFG1rdC5tZWdhLWFsY2FuY2Uu
Y29tghlta3QubWVnYXR1cnZpYWdlbnMuY29tLmJygg9ta3QubXVsdGktZGkucHSC
EG1rdC5teXBldHNob3AucHSCEW1rdC5ucGlicmFzaWwuY29tghBta3Qub2xpY2Fy
Z28uY29tghBta3Qub21uaWJlZXMuY29tghNta3Qub3Nnb2xpYXJkb3MuY29tghdt
a3QucGFwZWxhcmlhc2FncmVzLmNvbYITbWt0LnBtc3BhLnJqLmdvdi5icoIObWt0
LnByZXZvaXIucHSCFm1rdC5wcm9kZGlnaXRhbC5jb20uYnKCDm1rdC5zYWxlc3Vw
LnB0ghBta3Quc2VhZ2VuY3kub3Jnghdta3Quc2VycmFzY29uc3VsdGluZy5wdIIU
bWt0LnNpbmFmcmVzcC5vcmcuYnKCEG1rdC5zb2JhcnJvc28ucHSCE21rdC5zdGFu
dG9uY2hhc2UucHSCFm1rdC5zdWNlc3NvZW12ZW5kYXMucHSCEW1rdC50ZWpvYnJp
bmRlLnB0gg5ta3QudHJlc2NlLmNvbYINbWt0LnVhdW1lLmNvbYIUbWt0LnZhc2Nv
bWFycXVlcy5uZXSCE21rdC52aWFuYWxvY2Fscy5jb22CFG1rdC54emNvbnN1bHRv
cmVzLnB0ghJta3QueW91bGluZS5jb20uYnKCDG1rdC55b3V1cC5wdIIMbWt0Lnl1
bml0LnB0gg5ta3QuemFudGlhLmNvbYIQbWt0LnpvbmF2ZXJkZS5wdIIPbmV3cy5h
cHJvZmVyLnB0ghBuZXdzLmRlY2VuaW8uY29tggxuZXdzLmZlZWQucHSCGW5ld3Mu
aW1wZXR1c3VuZGVyd2Vhci5jb22CF25ld3MubGlxdWlkd29ya3MuY29tLmJyghdu
ZXdzLm11c2ljYW5vY29yYWNhby5wdIIXbmV3cy53ZWJtYXJrZXRpbmdwdC5jb22C
D25ld3Mud2lubmluZy5wdIIZbmV3c2xldHRlci1wdC51c2JzcG90LmNvbYIYbmV3
c2xldHRlci5jbWN2aXN1YWwuY29tghhuZXdzbGV0dGVyLmRldXRlci5jb20uYnKC
H25ld3NsZXR0ZXIuZWNvbW1lcmNlbmV3cy5jb20uYnKCHW5ld3NsZXR0ZXIuZW1w
cmVnb3NtYW5hZ2VyLnB0ghpuZXdzbGV0dGVyLmlnb2xkZW52aXNhLmNvbYIUbmV3
c2xldHRlci5uZXN0bGUucHSCFG5ld3NsZXR0ZXIub2dpbHZ5LnB0ghNuZXdzbGV0
dGVyLm9pa29zLnB0ghduZXdzbGV0dGVyLm9yaWRyZWlhLmNvbYIXbmV3c2xldHRl
ci5wZW5kcml2ZXMucHSCFm5ld3NsZXR0ZXIucGluYXlhcy5jb22CFm5ld3NsZXR0
ZXIudXNic3BvdC5jb22CFm5ld3NsZXR0ZXIudmFsc291c2EucHSCJG5ld3NsZXR0
ZXJzLmFzYy1hZHZhbmNlZHNraW5jYXJlLmNvbYIZbmV3c2xldHRlcnMuc29jaWFs
dGltZS5wdIIYcHJpbWF2ZXJhLmNyZWF0ZWluZm9yLnB0MEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAQcjKsd8i
RkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF/Q3gGlQAABAMARzBFAiBjOXDs
uQuv+85BDpKFtQEX7m0Y9aCHTw2XM3d5///AygIhALuqjP7nzyU9NhNFiTBc7Kfi
sPWl/UsN6Hy/2o0drFuEAHUARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+
bUcAAAF/Q3gGuAAABAMARjBEAiAEDHxLXxkbgt6a6g75eupLdltlkooGkGe/dCX/
smgJCgIgALQih35EEL7zWMsVoR4CvCCD6E0Y9cDMm7t5BThSbYowDQYJKoZIhvcN
AQELBQADggEBAIrMxzlWsfmLNltyGj1+8qqy9Sb9V9GYWBFa7n4lg8dWU8/upCpb
rt73tDlZMr/CMMYV8jwo46KlNFrb2YO4FdsKJEWcQPQfXJTjpvDh5ev8FUIA6Wk9
2zYTx1BwtkhdTu6GgaOWGrnPdSS6PYZxtapLcqptnYjqa/T/XS7Hw8kkgOQVOskU
qtKSw0Y6jz13KJPxyTgExsTr5D/Sd7pcdRHvGXD9iNJCQn6oyy45KmkvCzQfpe/Q
IjOkldsJRh6vKfpp3FD8Oggb+egoF8DOPz9moMVdyvUYSPHsTJLYAhbGVctSnUpy
KgOEyj9+c9Nfh/bW6zXZ8B1uEgbxOvfC5Ig=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZQFHb6TjwefGdDvczc7
EYdPFxSUwEJUCkM88ey6KunjrT2bsAxkGDygrIDDl1Zy7VmR8bYIP0EVUFdSVr+V
nJC4gpolhzn7c2pWjIodlj4OD63WIFWaaoQ8OpUqXVGtnuAMGC5Dr88/No6yfimA
v7nwthRiLqPocRmNUCTsx0ck5V15qUbh91XAwheQskUmcZhsxQ29HdSU+suLzt8E
njCI/H41/9XTx7cgGxqNXzPOISASOVhno/VJHza853o/JeXTm3y+5EpKN1XbNwOb
LQTMpoy+EbAnLoK7ImGRLYmnv6B+Cit1vwnU/5P8oTyGJ7EMbejRUrcoc43BmK8/
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330867577663848379582197554936711877360833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 02:13:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 02:13:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25951843893127595411379199004779299848070703379695433836594470577443679518484679769265161414614793786542205436794507111924273580544770527078303960182729862892337646619456065907068825336947985063375749694542697554257497265000873319044083071814547042743247974528044287951978839461895214764883513972635984791148888327833789161143921567296003023833924943424253663085393900818890834786182664742539088182611334986642497228069488869369015288695602301901120648489867904268877802048138919906035080253717061958720836508272092336942865959156524271317148162010678834942726238931067734353438993509953404508757707697013247892733843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92a205dff8ec9314b9fc6bb6c3f328de402d8529
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.mapamental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstar.cadalist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acountia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celvitae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conversacionesconbarriguitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupojpm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hoteisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.julianafonte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megaturviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omnibees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yunit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.empregosmanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pendrives.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f4378069500000403004730450220633970ecb90baffbce410e9285b50117ee6d18f5a0874f0d97337779ffffc0ca022100bbaa8cfee7cf253d36134589305ceca7e2b0f5a5fd4b0de87cbfda8d1dac5b8400750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f437806b800000403004630440220040c7c4b5f191b82de9aea0ef97aea4b765b65928a069067bf7425ffb268090a022000b422877e4410bef358cb15a11e02bc2083e84d18f5c0cc9bbb790538526d8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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