egoi.agavetadodinheiro.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:83:06:bf:da:7a:ae:40:3c:fa:7a:0a:e1:37:02:54:2e:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=egoi.agavetadodinheiro.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:06:bf:da:7a:ae:40:3c:fa:7a:0a:e1:37:02:54:2e:49
Serial Number (int): 305922819389883425774616484312913494158921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:a4:5d:c5:98:64:e8:a0:1e:27:a6:45:03:98:df:2b:2d:95:df:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:20:99:35:76:8d:19:69:0f:d6:fc:7d:bb:c5:a1:c9:51:83:13:7b
Fingerprint (sha256): de:b8:07:e9:00:0f:b0:8b:c0:3c:bc:06:77:a0:dd:3e:40:65:ff:ab:e0:16:ea:79:9a:c2:04:b5:7e:be:7f:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate egoi.agavetadodinheiro.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egoi.agavetadodinheiro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alunos.tccdescomplicado.com.br
comunic.piracanjuba.com.br
comunicacao.arsnorte.min-saude.pt
comunicacao.ipdj.pt
cursodepaineldeled.newtonmaximo.com.br
ebook.escoladoautismo.com.br
egoi.agavetadodinheiro.com.br
faturadigital.cm-mertola.pt
go.goiamy.com.br
learning.jeronimo-martins.com
mkt.acetiimoveis.com.br
mkt.adeusdepressao.net
mkt.afabricadevendas.com.br
mkt.agenciacanopus.com.br
mkt.amifrigo.pt
mkt.amorfizbolo.com
mkt.armilarworld.es
mkt.arsnorte.min-saude.pt
mkt.atmosensation.com
mkt.babyliberdade.com
mkt.blocomais.com.br
mkt.bolinhodemelgourmet.com.br
mkt.canadavirtual.com.br
mkt.carteira.estudantesdobrasil.org.br
mkt.cenaescoladeatores.com
mkt.cenertec.pt
mkt.cm-alandroal.pt
mkt.conhecimentopartilhado.com.br
mkt.connectstudy.com.br
mkt.contabilistaplay.com.br
mkt.contatosdigital.com.br
mkt.creativeeye.pt
mkt.crja.com.br
mkt.deltabusiness.com
mkt.dermadoctor.com.br
mkt.designtimecoworking.com
mkt.dirleivandes.com
mkt.dott.pt
mkt.elyanagoncalves.com.br
mkt.enterfix.com.br
mkt.fator5.net
mkt.fechometalusa.com
mkt.filipengine.pt
mkt.franco.pt
mkt.frutaimperfeita.com.br
mkt.fsdown.org.br
mkt.ganheextratrabalhandocasa.com.br
mkt.hospitalsantacruz.com.br
mkt.ihomeimoveis.com.br
mkt.ilaserday.com
mkt.impressmarketingdigital.com.br
mkt.inboundbox.es
mkt.infolk.ga
mkt.itscontabil.com.br
mkt.jtec.com.br
mkt.kingwine.com.br
mkt.linavet.com.br
mkt.lisbondigitalschool.com
mkt.lmobile.pt
mkt.madersilva.com.br
mkt.massucatotreinamentos.com
mkt.milacozzi.com.br
mkt.miolito.com
mkt.mstore.pt
mkt.multiplicadordigital.com
mkt.nextsource.pt
mkt.nortemed.pt
mkt.novatronica.com
mkt.ofuturodizpresente.pt
mkt.oxfordjeans.com
mkt.pajunet.com.br
mkt.phrlegal.com
mkt.planum.io
mkt.portalconhecer.com.br
mkt.precisaassessoria.com.br
mkt.printstore.com.br
mkt.programadorespartano.com.br
mkt.prohoquei.pt
mkt.radiantecentroeducacional.com.br
mkt.radiotransmundial.org
mkt.realizesonhoscomextras.com.br
mkt.regimecomsaude.com
mkt.sanahotels.com
mkt.sejagourmet.com
mkt.sitiodobem.com.br
mkt.spatiacomporta.com
mkt.speednetworking.com.pt
mkt.tecvoz.com.br
mkt.tempus.pt
mkt.totumsport.es
mkt.tradumundi.com
mkt.tribalmidia.com.br
mkt.verdadesdoemagrecimento.com
mkt.vixcursos.com
mkt.wififi.com.br
mkt.xtreme.pt
mkt.zmaximoveis.com.br
news.meamo.com.br
ofertas.estiloeconforto.com.br
suporte.bebesdicasonline.com

Other certificates including the domain name agavetadodinheiro.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for egoi.agavetadodinheiro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhW+JjXSwsSkEKfsSw6L
xMmRUNvwl3BY86GWGrDENlXtssnlWGPiwKzQnxAsch9A/GM93276jjgXn6kT+Ek+
3QA40RugozxCt4KTNUKsiMjEnnEr1a1m2hVQ9xuQmjF40B9TVtZOlr9bdLvqjjb7
IVizxAEhxTW0LPJXx3EJ5y7CCfRJaJlPeGP2bSlk4UP2QZd+tTXSUqrXrH/S5qii
Mnu61d/L0+mgf6m5tuVBOv6idkYY2FDYzd34ztdtZ+S04N0thncfnxEx6aQB7dso
eumLrBtmhuwAOz4NbazM3JU4HPkSBX0uNE9ENa5dJlk+KL7n4RfL+Xw0aH4DbOzu
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305922819389883425774616484312913494158921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-21 18:12:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 18:12:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egoi.agavetadodinheiro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25510859362903610931279135184245358394450615868210007080794324556515316695939445711406328276012470875879718210536433420181792708767797970705352568222827619473580371691177440929477587293716164029779845178036081674235448047789808157464167037419051307625710149000017776232754872689423786425146189079119637328784921222985186547140372096281436719585403083983820884699518655168090810492866712822881745880780434193744071470184264576997501208177821038906759974859270334463728041951639306221876854214546226377177101179265796238330359349813311480938813704750469964935959659660563148280038975938209937017354026193185977467203081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80a45dc59864e8a01e27a6450398df2b2d95dfd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alunos.tccdescomplicado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunic.piracanjuba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.ipdj.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursodepaineldeled.newtonmaximo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.escoladoautismo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.agavetadodinheiro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faturadigital.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.goiamy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.jeronimo-martins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acetiimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adeusdepressao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afabricadevendas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agenciacanopus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amifrigo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amorfizbolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armilarworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atmosensation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.babyliberdade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blocomais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bolinhodemelgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canadavirtual.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carteira.estudantesdobrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenaescoladeatores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenertec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-alandroal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conhecimentopartilhado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.connectstudy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contabilistaplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contatosdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.creativeeye.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deltabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dermadoctor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designtimecoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dirleivandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dott.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elyanagoncalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.enterfix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fator5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fechometalusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.filipengine.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.franco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.frutaimperfeita.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fsdown.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ganheextratrabalhandocasa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hospitalsantacruz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ihomeimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ilaserday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.impressmarketingdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inboundbox.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infolk.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.itscontabil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jtec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingwine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linavet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisbondigitalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lmobile.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.madersilva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.massucatotreinamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.milacozzi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miolito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mstore.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multiplicadordigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nextsource.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nortemed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ofuturodizpresente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oxfordjeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pajunet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.phrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.planum.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portalconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.precisaassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.printstore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.programadorespartano.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prohoquei.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiantecentroeducacional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiotransmundial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realizesonhoscomextras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.regimecomsaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sejagourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sitiodobem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spatiacomporta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speednetworking.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecvoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tempus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.totumsport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tradumundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tribalmidia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.verdadesdoemagrecimento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vixcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wififi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xtreme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zmaximoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.meamo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertas.estiloeconforto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.bebesdicasonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000178f5d929370000040300483046022100bcea55babf2f6c6420707070ed75c16324aae727c771ab9d45fe5d04ae1ed969022100b1aacaa3dab69ab2b20dbf645753d92ff9cbf9ebea2630d7149b768ab061341d0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178f5d92a0c0000040300473045022100b5d60fdca3c0e196d17b08142f38ef7dd6eaacbbce1d268718367a207fbdd14702202ca1aaf115edb0a81a932abcf61076348299a3b85c9bcabc740e086192b7b9d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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