newsletter.fotosport.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:83:7d:19:58:44:e4:4f:24:17:04:23:c0:15:c0:a2:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=newsletter.fotosport.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:83:7d:19:58:44:e4:4f:24:17:04:23:c0:15:c0:a2:eb
Serial Number (int): 423486042868256228763276416012322001167083
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:01:0f:8c:cc:0e:41:41:d3:28:e7:55:0c:4b:87:ef:c9:51:3c:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:a7:4a:a5:12:58:cb:ac:bd:f5:e0:6e:ad:b2:04:6c:3c:73:b2:d1
Fingerprint (sha256): eb:a8:8e:a8:25:88:06:42:c4:77:84:59:e0:39:30:4a:8b:f7:30:51:75:c1:4b:86:83:60:73:0a:e0:a8:f8:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsletter.fotosport.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsletter.fotosport.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brodcast.mkt.ca-seguros.pt
contato.amm-mg.org.br
egoi.eventshake.app
export.neosante-hs.com
fp.fnac.pt
go.cm-mertola.pt
info.mkt.maistecnologia.com
info.newsletters-abreu.com
info.sesconblumenau.org.br
info.smxlogistics.com
informacoes.euroindy.com
inst.al.ms.gov.br
mkt.adegamayor.pt
mkt.aetice.pt
mkt.agencias.meioemensagem.com.br
mkt.agriocasion.com
mkt.agromaquinaria.es
mkt.aphort.com
mkt.bebescomamor.pt
mkt.belavista.sempli.com.br
mkt.besttimetour.com
mkt.blueticketnews.pt
mkt.bragaconta.com
mkt.braver.pt
mkt.burza.com.br
mkt.canaltech.com.br
mkt.cm-aljezur.pt
mkt.codifactus.pt
mkt.construsitebrasil.com.br
mkt.crcgo.org.br
mkt.cristema.com
mkt.designforyou.pt
mkt.digitaisdosucesso.com.br
mkt.emviagem.pt
mkt.espacoluz.pt
mkt.europamundo.com.br
mkt.future-health.care
mkt.future-healthcare.eu
mkt.gtmweb.com.br
mkt.hfhotels.com
mkt.hotinker.pt
mkt.ibecc.com.br
mkt.ideiapack-online.pt
mkt.imperiodossentidos.com
mkt.kingteste.com.br
mkt.knotkids.com
mkt.leiria-fatima.pt
mkt.lendas-sublimes.pt
mkt.lokirepresentacoes.pt
mkt.marcogouveia.pt
mkt.memiranda.pt
mkt.minucor.com.br
mkt.murilomunhao.com
mkt.nneventos.com.br
mkt.nwangola.com
mkt.oneeyedfilms.com
mkt.osher.com.br
mkt.parceiros.meioemensagem.com.br
mkt.plrprofissional.com
mkt.projetorentabilizacao.com.br
mkt.promediacion.com
mkt.psdb.org.br
mkt.rangel.com
mkt.repsolmove.com
mkt.rethinksolucoes.com.br
mkt.riscozero.info
mkt.romeroysimon.com
mkt.sacradalmas.uy
mkt.sanahotels.info
mkt.sanro.com
mkt.saudeprime.pt
mkt.schultz.com.pt
mkt.scml.pt
mkt.seteco.com.br
mkt.setemargens.com
mkt.snqtb.pt
mkt.sosconsumidor.com.br
mkt.sove.pt
mkt.ticketline.pt
mkt.transnautica.pt
mkt.tzseguros.com.br
mkt.tzsystems.com.br
mkt.vegascard.com.br
mkt.veiculos.meioemensagem.com.br
mkt.viaserumos.pt
mkt.vitalcard.com.br
mkt.vivamelhor.pt
mkt.wecreateyou.biz
mkt.you.com.pt
mkt.youlikeitstore.com
mkt.yourhotels.com.pt
mktbr.npdbrasil.com
news.edatalink.com.br
news.norsafe.pt
news.phdisplays.com.br
news.standvirtual.com
newsletter.autocabomonte.pt
newsletter.fotosport.pt
newsletter.telepizza.pt
spa.enjoylife.pestana.com

Other certificates including the domain name fotosport.pt

(limited to 100 certificates)

Certificate

The complete raw certificate details for newsletter.fotosport.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNLi+XGa+cPjpAsp77yl
xcQBtF5PSZgKIZCLy2uR/eMGFrMo2tCpnFKlHqT4Sz1IKbu90hcULjdkwcErbuWP
2ss9RkcSUpI8vJ8IS0Tgo6xP+58WT5jK93C/ex1G09Ba/TVCLoySxbamtlohDhjE
pMmEfJg7CstUAH8t1RZGR8BVv48/G4tYNchFFit6mL/QurDFYCUdoH4gQRhTCMGh
Ot9STxOpGZ9pmCVC4MoQ3JcLZOEQlQdiQgP1E1ju5FRbvyeZ/XvdXv4d5tyCTQ4A
9f6kQh1Oyk4fQuL1vEWxu3RC1Mv+bvEWY/QP4f/IXy4qcolwhioiuzAu0vFvptqS
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423486042868256228763276416012322001167083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 02:10:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 02:10:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.fotosport.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22321933741549596127887576558695425470328757180159824372679238993634455534638922628778905219525433041370244404297247924992176307027130947939545853604698122024844354523801282593723094939808624229780595380381972438341988852331436922141319673294545575071458538364146414916348033645978594403196894025106130853413792263588833956025482965777257838122701451196779426211687442537911394592085333048751888347605559924189403442349752460229234270624080090213233058201243157421305928883561376657497477981563099748143814630871824995460159895195196731777876916140159276819362648155573459125102410468521376262750443061800864210129511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06010f8ccc0e4141d328e7550c4b87efc9513cf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brodcast.mkt.ca-seguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contato.amm-mg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.eventshake.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'export.neosante-hs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.fnac.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.mkt.maistecnologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.newsletters-abreu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.sesconblumenau.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.smxlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informacoes.euroindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inst.al.ms.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adegamayor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aetice.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agencias.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agriocasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agromaquinaria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aphort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bebescomamor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.belavista.sempli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.besttimetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueticketnews.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bragaconta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.braver.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.burza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canaltech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-aljezur.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.codifactus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.construsitebrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crcgo.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cristema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designforyou.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitaisdosucesso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emviagem.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacoluz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europamundo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-health.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-healthcare.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hfhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotinker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibecc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ideiapack-online.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imperiodossentidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingteste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.knotkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leiria-fatima.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lendas-sublimes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lokirepresentacoes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcogouveia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.memiranda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.minucor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.murilomunhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nneventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nwangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oneeyedfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.parceiros.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plrprofissional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.projetorentabilizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.promediacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psdb.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.repsolmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rethinksolucoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.riscozero.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.romeroysimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sacradalmas.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeprime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.schultz.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scml.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seteco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.setemargens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.snqtb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sosconsumidor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sove.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ticketline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.transnautica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vegascard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.veiculos.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.viaserumos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitalcard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vivamelhor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wecreateyou.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.you.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youlikeitstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yourhotels.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktbr.npdbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.edatalink.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.norsafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.phdisplays.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.autocabomonte.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.telepizza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spa.enjoylife.pestana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028eb321eb0fdd1f6722ceead5a9440e0975cc92054b19cf3dfc9130964cc808cf0a3bb503d23f1dfbea21acedca24cfcce72663c42439d19dfb6796df84b0d6f6e18e155dd536cfe41ed2f545bc9da0708f81961e32ef6c76dfd5a3620a2394c65cc370a123eeefa769af6ec561eb36534a3256511d40beeabe0a4bde495182fb3c625efef7dbb01a8205a5b8d67c34b3ce782bb5b3dcb72cf1cf2ed161eacb3c5d3501dee7db1c1e7e4800835bf516ee57ae70883178f2c873e8d7d3cbab69030f21a25cfe8f96eb2d755d4df568328658d973cd55c78ae87e03c69832fc1c9ee1c3ba7807a5b82e1db49fe6f79d384184efac957bc41a978631330ca76ba76