mkt.israelfernandezseguros.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:a7:28:17:1f:e1:e0:18:04:be:c8:41:de:fd:6d:9a:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.israelfernandezseguros.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:a7:28:17:1f:e1:e0:18:04:be:c8:41:de:fd:6d:9a:eb
Serial Number (int): 383720416756089469629051599983562474756843
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:a7:31:16:7c:dd:e4:ab:ca:58:18:a8:14:bc:0c:9b:4e:1d:71:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:be:e3:3e:0f:72:b6:6a:d0:55:b2:29:b0:60:b8:c5:5f:63:a4:28
Fingerprint (sha256): ed:f3:66:1f:ea:9f:5d:57:c4:3d:03:e8:6f:66:e5:64:bf:22:77:be:4e:a7:36:73:16:8c:72:ca:b8:1a:74:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.israelfernandezseguros.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.israelfernandezseguros.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebook.caminhosdalideranca.com.br
egoi.info.topcar.com.pt
egoidev.e-goi.com
info.informecomunicacao.com.br
mail.pt.diorbeauty.com
mkt.abiti.pt
mkt.aclweb.pt
mkt.altear.pt
mkt.anzanagroup.com
mkt.appacdmporto.com
mkt.armazemcerealista.com.br
mkt.armilarworld.com
mkt.axismundieditora.com
mkt.bagodexisto.pt
mkt.balancasmarques.pt
mkt.boagra.pt
mkt.bodydepil.pt
mkt.cabofrio.rj.leg.br
mkt.clinica-sbe.pt
mkt.clinicaleontinasantos.com
mkt.cmcvisual.pt
mkt.cnsys1.info
mkt.contosdapraca.com
mkt.cpiq.gov.co
mkt.deathclean.com
mkt.decorenewsarquitetura.com.br
mkt.dizconta.com.br
mkt.drbernard.co
mkt.e-staples.pt
mkt.ebcommarketing.com.br
mkt.editorapedaletra.com.br
mkt.editorquality.com.br
mkt.emanuelgomes.com
mkt.eurogree.com
mkt.geotarget.pt
mkt.gestwin.com.pt
mkt.gigahub.com.br
mkt.gohome.pt
mkt.grupojpatrao.pt
mkt.hi-techwonder.com
mkt.idalinafernandes.com
mkt.inapapackaging.pt
mkt.inherente.pt
mkt.interlat.co
mkt.iscar.pt
mkt.isosaude.com.br
mkt.israelfernandezseguros.com
mkt.japautomotive.pt
mkt.jfcarparts.com
mkt.jobsummit.pt
mkt.localsquare.pt
mkt.maplo.com.br
mkt.mariacristinalopes.com
mkt.matelasmaxiflex.fr
mkt.megavator.com
mkt.merece.pt
mkt.mi2.pt
mkt.miraflorespark.pt
mkt.mirear.pt
mkt.misscath.com
mkt.mobiliario-de-escritorio.pt
mkt.mvsantos.pt
mkt.nautisercentronautico.com
mkt.newsletter.tp-link.com
mkt.notariopvarzim.com
mkt.oneskin.pt
mkt.onsim.com.br
mkt.opco.pt
mkt.orientrelogios.com.br
mkt.pacec.pt
mkt.piscapisca.pt
mkt.planogradu.pt
mkt.pneubox.pt
mkt.pontodrops.com.br
mkt.portcare.pt
mkt.porthealthcare.pt
mkt.presse.inf.br
mkt.psikontacto.com
mkt.queerlisboa.pt
mkt.quintasantoandre.com
mkt.rodrigokim.com.br
mkt.rotarycambuci.com.br
mkt.socialiris.org
mkt.solyd.pt
mkt.teatromorumbishopping.com.br
mkt.tecnologiaqueinteressa.com
mkt.topspa.pt
mkt.uniaonaval.pt
mkt.vortalbuild.pt
mkt2.ordemdosarquitectos.org
news.digitalgreen.pt
newsletter.brindes-ecologicos.com
newsletter.brindes-ecologicos.pt
newsletter.brindes360.com
newsletter.brindes360.pt
newsletter.regalos-ecologicos.es
newsletter.usbspot.es
newsletter.usbspot.pt
rgtestes.e-goi.com
saudesolidaria.rotarycambuci.com.br

Other certificates including the domain name israelfernandezseguros.com

(limited to 100 certificates)
israelfernandezseguros.com
israelfernandezseguros.com
mkt.abceconsultoria.org.br
israelfernandezseguros.com
mkt.israelfernandezseguros.com
israelfernandezseguros.com

Certificate

The complete raw certificate details for mkt.israelfernandezseguros.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf51psw2i6eVvt0B4vLK
053lHdSBX/OYu4jG4nbWYy2RD/zMWTtjMm3PGb5QiAZ1cgHpduTjtQUHiwZvpR/0
PYELh8lw+QnToIaWHqgcKbIR7NdsSmzTNC3n0hzmoBjBycmohr9c4ocyMovfRoxg
GJC3xprE7jdDhP6pqS9NQgfHniQrrU8nlH1quazGWE/UnDDmbNA1qiIk+O88x9A3
7lJZAvXYx6YRJJyfyrsUe9OsOW4dNqzofJ81Qg7KFD2WpndromeSmjytjo/DbGGf
XumrmtukUQE84Sa8W/gwpbMUtXFhyKiY5biYSQNN/EVLR4x1eBstGILc3eYwT9DJ
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383720416756089469629051599983562474756843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 16:22:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 16:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.israelfernandezseguros.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22974611892625058979579900867988354155966632629358475648291152825067304577441967535254394295464601431170288009712473340862145022121608690383957546230949840790660976165677929718170464783439474676114761533179780689568258803254044757211560874955582237998474294184796828197060789085569912973561573495259223483294939294638627334106995081244857842346582507305525152070162624347184049470055692182423401230865279921358987323620626824668844195677912146261458309309147327705029452667457879830790970204961909084210358640692846019559903415366897031302535903880616974211261693827057079435071748698225481975125514914204328257440041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1a731167cdde4abca5818a814bc0c9b4e1d714d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.caminhosdalideranca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.topcar.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoidev.e-goi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.informecomunicacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pt.diorbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abiti.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aclweb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.altear.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.anzanagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.appacdmporto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazemcerealista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armilarworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.axismundieditora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bagodexisto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balancasmarques.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boagra.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bodydepil.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.leg.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinica-sbe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicaleontinasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cmcvisual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cnsys1.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contosdapraca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cpiq.gov.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deathclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.decorenewsarquitetura.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dizconta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.drbernard.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.e-staples.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ebcommarketing.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.editorapedaletra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.editorquality.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emanuelgomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurogree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.geotarget.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gestwin.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gigahub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gohome.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupojpatrao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hi-techwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.idalinafernandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inapapackaging.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inherente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.interlat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iscar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.isosaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.israelfernandezseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.japautomotive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jfcarparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jobsummit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.localsquare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maplo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mariacristinalopes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.matelasmaxiflex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megavator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.merece.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mi2.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miraflorespark.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mirear.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.misscath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobiliario-de-escritorio.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mvsantos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nautisercentronautico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newsletter.tp-link.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.notariopvarzim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oneskin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.onsim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.opco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.orientrelogios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pacec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.piscapisca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.planogradu.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pneubox.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontodrops.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.porthealthcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.presse.inf.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psikontacto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.queerlisboa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintasantoandre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rodrigokim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rotarycambuci.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.socialiris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.solyd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.teatromorumbishopping.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecnologiaqueinteressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.topspa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uniaonaval.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vortalbuild.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.ordemdosarquitectos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.digitalgreen.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.brindes-ecologicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.brindes-ecologicos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.brindes360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.brindes360.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.regalos-ecologicos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgtestes.e-goi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudesolidaria.rotarycambuci.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b48f5db8e0000040300473045022100a34779cce1c221481513d3b322e0481a7590ee6798260a2661a2f7c5946a439c02205614311e7e31cc9ef764ba05cfa34b9306c690b9878160bd55d043444587abfb007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b48f5db9f000004030047304502203dd12caed7b0c09b67be448d6336e8bbc0b0a7df5e26d5d6d24b52ab90e55c3b022100a27606335f0c9b82d5d055352a1f26339f41e3cdf40e485a7c0abe8addbcfbfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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