mkt.switchdigital.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:02:1d:95:e3:29:59:2d:62:d1:fe:92:7a:5b:d8:f1:71:ac was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.switchdigital.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:1d:95:e3:29:59:2d:62:d1:fe:92:7a:5b:d8:f1:71:ac
Serial Number (int): 349169034332375481489268843811883740918188
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:68:11:a1:fd:b2:19:c7:b3:3a:cd:a1:d6:f2:bb:79:88:e5:fa:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:25:fc:f8:8f:05:a4:28:0a:b2:56:51:08:97:b0:8f:cf:ca:ab:e7
Fingerprint (sha256): ef:b5:d5:c8:72:3b:38:06:a4:bb:57:6e:b5:d1:16:b4:88:30:b9:1d:18:c7:fd:84:fe:5d:dc:44:84:dc:db:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.switchdigital.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.switchdigital.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

centro.interageoffice.com.br
comag.comagequipamentos.com.br
egoi.dicadebolsa.com
emailmkt.mundodafa.com
m.travelgate.pt
mail.cultivoindoor.com.br
mkt.aapi.pt
mkt.academia.samsys.pt
mkt.accessorize.es
mkt.accessorizeportugal.com
mkt.amandagomesdermato.com.br
mkt.apex.pt
mkt.arturai.com
mkt.autowin24.com
mkt.bilbilbeer.com.br
mkt.bolsoforte.com.br
mkt.boticashotel.com
mkt.btw.com.pt
mkt.cansiltra.pt
mkt.cellerdelroser.cat
mkt.chipviagem.com.br
mkt.cidades.co
mkt.companhiaterra.com.br
mkt.contaspoupanca.pt
mkt.credito-taxa-servico.pt
mkt.dedeka.com.br
mkt.digitalfactory.pt
mkt.dynamicscreen.net
mkt.edsonterra.com.br
mkt.ello.marketing
mkt.empresasfuncional.com.br
mkt.emultimedia.com.pt
mkt.energiasimples.pt
mkt.escoteirosba.org.br
mkt.esj.pt
mkt.fbah.org.br
mkt.fixphonestore.com
mkt.formulaempreender.com.br
mkt.gate.pt
mkt.helderland.com
mkt.hommer.net.br
mkt.hotelzanon.com.br
mkt.iberfibran.pt
mkt.ifam.es
mkt.ifamfrance.com
mkt.imediato.pt
mkt.inglot.pt
mkt.inovecfc.com.br
mkt.institutodoconhecer.com.br
mkt.iotc.com.br
mkt.jasminsoftware.com
mkt.jma-peru.com
mkt.jma.com.mx
mkt.jma.es
mkt.jmacolombia.com
mkt.jmausa.com
mkt.lookedtwosaude.com
mkt.loteriabarquillo10.es
mkt.loteriainteligente.es
mkt.marcelobenati.com
mkt.martinaranda1965.com
mkt.modestocapachos.com.br
mkt.mr-blue.com
mkt.mundodafa.com
mkt.museuartesacra.org.br
mkt.omarketingpro.com
mkt.penseprint.com.br
mkt.perfume-store.uk
mkt.pipadigital.com.br
mkt.pretoceramic.com
mkt.prioenergy.com
mkt.ptcacademy.pt
mkt.radiopopular.pt
mkt.ricardocruz.com.pt
mkt.seminariologos.org.br
mkt.sks.co.uk
mkt.soldabarrabiquinis.com.br
mkt.spamed.com.br
mkt.spartancast.com.br
mkt.sportowin.com
mkt.switchdigital.pt
mkt.tixalia.com
mkt.tmx.com.br
mkt.tourlandportugal.com
mkt.transformesuasaude.com.br
mkt.travelgate.pt
mkt.unikadigital.com.br
mkt.unikrafht.com.br
mkt.unimolbrasil.com.br
mkt.virtsel.com.br
mkt.yetspace.com
mkt2.agroverdad.com.ar
mktrgpd.primaverabss.com
mrk.markbellucci.com
news.fsanches.pt
news.receitasdatiaceu.com
newsletter.worten.pt
newsletter.yvesrocher.pt
sportzone.miktd1.com
tiodey.tiodey.com.br

Other certificates including the domain name switchdigital.pt

(limited to 100 certificates)

Certificate

The complete raw certificate details for mkt.switchdigital.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S0LrCHN1p2KrySScfRK
PqgmSJFmhmdVu1NbgHkKewW3eu2DSI2EzPTFpIobbnulC+BcdRDVG8ShuAbfRMKp
3zdwCBLsc3e7xhbOicVHt4Rnoj4FeZAfb/Ht4q/f90topaJU8qOJJ8xKBgxVAi6l
SPgmYqNI/2UbdfJOzTV6lNl5oY5mH6A5mfsyfLnHC1BU5oxIsSQdiO/SPDh80YLo
R8Ud8UgaoYgLScm4djnDd9BEcfZ93i6GjPDyaMeUIT5hnN2JfArm3okI33ZLr8zI
db9tj1pGXbwal48kt/YcT7KDoK1cLpNEVRJNmG4COOEpLj5iM257pbNMhMdM9YbF
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349169034332375481489268843811883740918188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 02:09:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 02:09:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.switchdigital.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26406018548819942542935782560201574641090619359010823933620152607912263521666622299238624507247782048906962971625583235614103572427776830452616243960783354977227982880145969170996208627402205789342389500277174249054779142703988666279075411690373552017709949697823919690818567884951973190644581512765200240125436398283399705519882797545399847991605478098170199592313550604537039294571233784757289381232100195676502642634263109909058752167832328987154492285802636506604907890841355424769289568516977088763811296703467474220220772795891068973264615555125154749410390092900371138596289995422652042937290665628253538403773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e6811a1fdb219c7b33acda1d6f2bb7988e5fa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centro.interageoffice.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comag.comagequipamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.dicadebolsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailmkt.mundodafa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.travelgate.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cultivoindoor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aapi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academia.samsys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorize.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorizeportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amandagomesdermato.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arturai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autowin24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bilbilbeer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bolsoforte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boticashotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.btw.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cansiltra.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cellerdelroser.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chipviagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cidades.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.companhiaterra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contaspoupanca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.credito-taxa-servico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dedeka.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalfactory.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dynamicscreen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.edsonterra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ello.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.empresasfuncional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emultimedia.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.energiasimples.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoteirosba.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esj.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fbah.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fixphonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.formulaempreender.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gate.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.helderland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hommer.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelzanon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iberfibran.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifam.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifamfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imediato.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inglot.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inovecfc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.institutodoconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iotc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jasminsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma-peru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmacolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lookedtwosaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.loteriabarquillo10.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.loteriainteligente.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcelobenati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.martinaranda1965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.modestocapachos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mr-blue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mundodafa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.museuartesacra.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omarketingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.penseprint.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.perfume-store.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pipadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pretoceramic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prioenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ptcacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiopopular.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ricardocruz.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seminariologos.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soldabarrabiquinis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spartancast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sportowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.switchdigital.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tixalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tmx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tourlandportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.transformesuasaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.travelgate.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unikadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unikrafht.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unimolbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.virtsel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yetspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.agroverdad.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktrgpd.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrk.markbellucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.fsanches.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.receitasdatiaceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.worten.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.yvesrocher.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportzone.miktd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiodey.tiodey.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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