mkt.radiopopular.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:df:07:30:b4:58:32:e5:6e:e8:9a:c6:78:28:14:80:61 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.radiopopular.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:df:07:30:b4:58:32:e5:6e:e8:9a:c6:78:28:14:80:61
Serial Number (int): 319821597715743289614030552632599048912993
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:1f:4f:e5:48:e3:22:ed:cd:38:14:50:87:a3:67:47:ad:c2:07:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:b5:7a:e2:00:23:31:98:59:b1:d0:7f:dc:26:93:99:57:74:27:1e
Fingerprint (sha256): d6:27:37:6b:51:13:a8:70:d9:7f:58:ec:7a:f1:f3:74:6c:44:79:23:fd:66:5c:e7:3f:f4:8e:c3:10:ee:7d:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.radiopopular.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.radiopopular.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

divulgacao.hospwork.pt
e-goi.jf-estrela.pt
mail.amecbrasil.org.br
marketing.cadernointeligente.pt
mkt.aapi.pt
mkt.academia.samsys.pt
mkt.accessorize.es
mkt.accessorizeportugal.com
mkt.accountingsummit.pt
mkt.agenciacontinental.com
mkt.airev.pt
mkt.apex.pt
mkt.autoalegre.pt
mkt.autoribeiro.com
mkt.beils.com.br
mkt.beils.mx
mkt.best-of.pt
mkt.bilbilbeer.com.br
mkt.boticashotel.com
mkt.casapinheiro.com
mkt.cavida.pt
mkt.cbluxus.pt
mkt.cgm.pt
mkt.comerciomix.com.br
mkt.copyvis.pt
mkt.corecondf.org.br
mkt.correosexpress.com
mkt.credito-taxa-servico.pt
mkt.crf-fiit.com
mkt.dedeka.com.br
mkt.deisyosorio.com
mkt.digitalsign.pt
mkt.dynamicscreen.net
mkt.ello.marketing
mkt.elmueblesuizojuniors.com
mkt.enigmind.pt
mkt.escolademaesepais.com
mkt.escoladosvencedores.com
mkt.farprotec.com
mkt.fbah.org.br
mkt.fisicatvedras.pt
mkt.fnbconsultoria.pt
mkt.formulaempreender.com.br
mkt.healthnews.pt
mkt.hovar.min-saude.pt
mkt.htlinecompany.com
mkt.ifam.es
mkt.ifamfrance.com
mkt.imaginario.co
mkt.indac.org.br
mkt.independa.com.br
mkt.induwash.pt
mkt.innturtle.com
mkt.interopera.com.br
mkt.jasminsoftware.com
mkt.jma-peru.com
mkt.jma.com.mx
mkt.jma.es
mkt.jmacolombia.com
mkt.jmausa.com
mkt.look4beauty.pt
mkt.loteriabarquillo10.es
mkt.mariaconcha.com
mkt.martinaranda1965.com
mkt.mindsetbr.com
mkt.multi-packing.com.co
mkt.myiced.com
mkt.nautilus.pt
mkt.naxi.com.br
mkt.oficinasmforce.pt
mkt.omarketingpro.com
mkt.orchestra.com.br
mkt.padocadoalex.com
mkt.pestanarh.com
mkt.pimacon.pt
mkt.piupiuchick.com
mkt.pontoid.com.br
mkt.protemax.es
mkt.protemaxgrupo3d.com
mkt.ptcacademy.pt
mkt.radiopopular.pt
mkt.reasonwhy.es
mkt.rico.pt
mkt.sevways.com
mkt.solarimpact.pt
mkt.sufersa.com
mkt.urbandesigncare.pt
mkt.vintagebutterfly.pt
mkt.wefind4u.pt
mkt.xn--devillafaeseguros-nxb.com
mkt.yetspace.com
mkt.zooera.com.br
mkt1.casadopresunto.com
mkt2.agroverdad.com.ar
mktrgpd.primaverabss.com
mrk.markbellucci.com
news.avvdbrasil.org.br
news.fsanches.pt
priogo.prio.pt
tiodey.tiodey.com.br

Other certificates including the domain name radiopopular.pt

(limited to 100 certificates)
czdxto.radiopopular.pt
*.radiopopular.pt
publications.cwgc.org
slingshot.e-goi.com
*.radiopopular.pt
www.radiopopular.pt
radiopopular.pt
publications.cwgc.org
*.radiopopular.pt
radiopopular.pt
kundenmagazin.derpart.com
newsletter.yvesrocher.pt
slingshot.e-goi.com
mkt.switchdigital.pt
slingshot.e-goi.com
mitteilungsblatt.seifert-medien.de
radiopopular.pt
*.radiopopular.pt
radiopopular.pt
flyer.aqua-dome.at
kiosk.antalis-verpackungen.de
brochures.waterrower.co.uk
publications.cwgc.org
mkt.radiopopular.pt
www.radiopopular.pt
*.radiopopular.pt
*.radiopopular.pt
mitteilungsblatt.seifert-medien.de
*.radiopopular.pt
mkt.switchdigital.pt
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
katalog.gartenmode.de
dokumente.zettlerelectronics.com
flyer.aqua-dome.at
brochures.waterrower.co.uk
flyer.aqua-dome.at
spv.radiopopular.pt
*.radiopopular.pt
radiopopular.pt
*.radiopopular.pt
publications.cwgc.org
www.radiopopular.pt
radiopopular.pt
mitteilungsblatt.seifert-medien.de
radiopopular.pt
slingshot.e-goi.com
portal.radiopopular.pt
www.radiopopular.pt
slingshot.e-goi.com
radiopopular.pt
radiopopular.pt
www.radiopopular.pt
publications.cwgc.org
czdxto.radiopopular.pt
newsletter.yvesrocher.pt
onlinekatalog.cultous.de
slingshot.e-goi.com
mkt.radiopopular.pt
www.radiopopular.pt
kundenmagazin.derpart.com
*.radiopopular.pt
kiosk.antalis-verpackungen.de
publications.cwgc.org
kiosk.antalis-verpackungen.de
*.radiopopular.pt
brochures.waterrower.co.uk
www.radiopopular.pt
teleport.radiopopular.pt
*.radiopopular.pt
slingshot.e-goi.com
mitteilungsblatt.seifert-medien.de
opiniaocliente.radiopopular.pt
produktkatalog.mwf-technik.de
www.radiopopular.pt
mkt.radiopopular.pt
radiopopular.pt
www.radiopopular.pt
*.radiopopular.pt
as001.radiopopular.pt
slingshot.e-goi.com
*.radiopopular.pt
slingshot.e-goi.com
laboratorionline.radiopopular.pt
czdxto.radiopopular.pt
portal.radiopopular.pt
mkt.radiopopular.pt
radiopopular.pt
slingshot.e-goi.com
slingshot.e-goi.com
welt-am-sonntag-kompakt.kiosk.plus
mkt.switchdigital.pt
brochures.waterrower.co.uk
yumpu.testact.de
produktkatalog.mwf-technik.de
kundenmagazin.derpart.com
mkt.switchdigital.pt
mail.radiopopular.pt
mitteilungsblatt.seifert-medien.de
slingshot.e-goi.com

Certificate

The complete raw certificate details for mkt.radiopopular.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIMZ5k83tFK/6obhN0+T
uFtzr+hlnLZK0KD/c/UnM5tvdUhMRImuZ+0DJa0TJpj6r4wiZPA/7n9UGOcGy8s5
kcRXrHv+xoyXg5fRHw7Tn/pixquCeClqrhbOXa+5qstuiW2j5Q09U7idRKHL+LJU
cjFD9hIP2TVkAmHH+Dtfwo5uz7S8/rVN5l2rnoKMN3G/hsTBtWWyLIghNQ667U4I
TOONcoUZza1WSwS/NZRogbM396DIyoxWCOhLn2bC51xFwQ0+SKvdxlFcaA2Xi1cT
Z6uPKhCmP9V2O0CRG0cE8OGrg0Zem0r9zsoXMgO+lq4aC3gPZ6a30v6Z4mWPUutv
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319821597715743289614030552632599048912993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 02:10:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 02:10:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.radiopopular.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20262777191218326745636737363186294801559010311236020917235124713561739779623809716343042529516332740361168899161688038218123562707730936416713327109062188634361129465248565335746308527582181315360106645970755996887699083426431999689504600960444566952115947772805804356222562126418103220583042366606030273811714091566248375866349192225988067961717216953053561284468855831390581503989689002198271344720362273403268474231750328963142326213559939551663605458585625336834746175144108354673490619068724626571441920213621048209808102043704377353271074359286338456669477367928838527297715519552776687665748011317000959389611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c1f4fe548e322edcd38145087a36747adc20732
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divulgacao.hospwork.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-goi.jf-estrela.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amecbrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.cadernointeligente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aapi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academia.samsys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorize.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorizeportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accountingsummit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agenciacontinental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.airev.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autoalegre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autoribeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.beils.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.beils.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.best-of.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bilbilbeer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boticashotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casapinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cavida.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cbluxus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cgm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comerciomix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.copyvis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.corecondf.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.correosexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.credito-taxa-servico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crf-fiit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dedeka.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deisyosorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalsign.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dynamicscreen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ello.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elmueblesuizojuniors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.enigmind.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escolademaesepais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoladosvencedores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.farprotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fbah.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fisicatvedras.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fnbconsultoria.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.formulaempreender.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.healthnews.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hovar.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.htlinecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifam.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifamfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imaginario.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.indac.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.independa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.induwash.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.innturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.interopera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jasminsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma-peru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmacolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.look4beauty.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.loteriabarquillo10.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mariaconcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.martinaranda1965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mindsetbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-packing.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.myiced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nautilus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.naxi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oficinasmforce.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omarketingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.orchestra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.padocadoalex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pestanarh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pimacon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.piupiuchick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontoid.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.protemax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.protemaxgrupo3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ptcacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiopopular.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.reasonwhy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sevways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.solarimpact.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sufersa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.urbandesigncare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vintagebutterfly.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wefind4u.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xn--devillafaeseguros-nxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yetspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zooera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt1.casadopresunto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.agroverdad.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktrgpd.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrk.markbellucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.avvdbrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.fsanches.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priogo.prio.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiodey.tiodey.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cc2fffbf30000040300483046022100db451f654aef2e17ec9b3e9f36398e1619b552d7ad3c76f702a37e646b944f1302210083bed3e081e6a337b588729aae1c03e50a4c778fbd40e986ce550ca575e9b6bd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc2ffffd8000004030047304502200ad9e0b8ee5a65ff51cc5be4eec401e5d3eaf172d4c087362139ac9b839c21e1022100dfe77fcc066d2d9543483504f4830b44277cd7d3b70be6fbd72f49d14fe44114
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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