mkt.valorcar.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:af:a0:7e:43:d1:04:79:18:6c:fa:3a:d5:95:77:67:12:2e was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.valorcar.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:a0:7e:43:d1:04:79:18:6c:fa:3a:d5:95:77:67:12:2e
Serial Number (int): 408211890022416493366085656902522160747054
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:bf:41:89:da:02:78:ce:be:50:76:ee:4d:b8:18:42:5c:81:8a:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:17:cd:a6:8f:35:8a:df:dd:2c:25:2d:ae:8d:98:88:56:4a:7a:ca
Fingerprint (sha256): fa:b6:f3:4f:1e:59:ee:a8:5c:82:7b:b0:18:bb:14:33:b7:61:92:ae:3d:9d:4b:4e:9f:67:3e:bd:14:40:a9:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.valorcar.pt

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.valorcar.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egoi.info.automaquinaria.co.ao
egoi.info.autosueco.co.na
go.capitalcinegetica.com
info.informecomunicacao.com.br
mkt.24horasonline.com.br
mkt.abreuadvogados.com
mkt.academiavortal.pt
mkt.altinoraposo.pt
mkt.anamnesequevende.com.br
mkt.andreiamachado.pt
mkt.anfip-sp.org.br
mkt.apamagis.org.br
mkt.artevasi.com
mkt.asdr.org.br
mkt.axiombr.com
mkt.beexcellent.pt
mkt.brasilreverso.com.br
mkt.casadosespiritos.com.br
mkt.centroabrantes.pt
mkt.cepedcursos.com
mkt.cinemateca.pt
mkt.contisystems.pt
mkt.drmsn.com
mkt.editorquality.com.br
mkt.eeg.uminho.pt
mkt.elou-solyd.pt
mkt.encontronacionalhd.pt
mkt.entreposto.co.mz
mkt.escoladeyoga.pt
mkt.estela.mymysticland.com
mkt.expansao.co.ao
mkt.fr.mymysticland.com
mkt.gasporto.org
mkt.gintaqua.com
mkt.grupocontrol.co
mkt.gruportp.pt
mkt.horoscopedujour.eu
mkt.ihrb.com.br
mkt.imoconcept.pt
mkt.jlaadvogados.com
mkt.jorgesabino.com.br
mkt.leiloesbr.com.br
mkt.lojakpf.pt
mkt.m2a.com.pt
mkt.maxiflexcolchon.es
mkt.medidental.pt
mkt.moviflor.pt
mkt.mundomistico.eu
mkt.mymysticstar.com
mkt.mymysticsun.com
mkt.mystischewelt.de
mkt.nautika.com.br
mkt.newsclinicadasconchas.pt
mkt.newsletters.montepio.org
mkt.pecuariabrasilassessoria.com.br
mkt.pedrasrasgadas.pt
mkt.povoaharleydays.pt
mkt.radarbrasilfestivais.com.br
mkt.ratatui.pt
mkt.revista-artilharia.pt
mkt.rill.work
mkt.rocha.pt
mkt.signes.es
mkt.sinafresp.org.br
mkt.sinteps.org.br
mkt.sisprod.com
mkt.sixt.pt
mkt.sns.gov.pt
mkt.soyservidor.com
mkt.tagusvalley.pt
mkt.teclusa.com
mkt.todomundo.tur.br
mkt.unimedriocomunica.com.br
mkt.uon-imobiliaria.pt
mkt.valorcar.pt
mkt.valquiriaarenas.com.br
mkt.vitaquantum.com.br
mkt.vivamaisfeliz.com.br
mkt.xdsoftware.com.br
mkt.zonacerealista-atacado.com.br
mkt.zonacerealistaonline.com.br
mkt1.mymysticland.com
mkt2.horoscopedujour.eu
mkt2.mymysticway.com
mkt3.meine-hellseherin.com
mkt3.mymysticsun.com
mktdacia.carby.pt
mktmitsubishi.carby.pt
mktnissan.carby.pt
mktrenault.carby.pt
mktvolkswagen.carby.pt
news.goweb.pt
news.mymysticland.com
news.nascecme.com.br
newsletter.rotadoromanico.com
newsletter.tek4life.pt
newsletters.robbialac.pt

Other certificates including the domain name valorcar.pt

(limited to 100 certificates)
mkt.editorfiscal.com.br
*.valorcar.pt
*.valorcar.pt
*.valorcar.pt
*.valorcar.pt
*.valorcar.pt
mkt.expertcomoemagrecerapido.com.br
mkt.editorfiscal.com.br
mkt.valorcar.pt

Certificate

The complete raw certificate details for mkt.valorcar.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZjCCDE6gAwIBAgISBK+gfkPRBHkYbPo61ZV3ZxIuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDcyMTI3NTBaFw0yNDAyMDUyMTI3NDlaMBoxGDAWBgNVBAMT
D21rdC52YWxvcmNhci5wdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJDvrZ4nuwtx95U0ww7sJ6y8auaA8kLwz65JbqlYdufhGid4AYWNnJpgh8fvizBb
JBPGSjQUpwqAVsGEgEAIZ1jIooAZarP89UHpEDGkBRNFUkB/LDmn/e3MMyXRuZ6/
SDy6lUMTArjh20vCgyKmuaG0CMuRY/a3Tli+EG3dI6+Yv0RXCX0QX5F1ShtQSv4w
B17rl5uqGe41zDU7Iy1N+qzLRuAVd5dGeSYH2yTCc2Rm+lZs11fOxGXSHC5ZCb0D
ZdwSLyWY6ZAQBCR9jIzL1WTD3x6m9rpbUBQw6+WonyIWks9AU87EOf2DQaiadJax
wcRGjMP7NooWPS6feorss0ECAwEAAaOCCowwggqIMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUn79BidoCeM6+UHbuTbgYQlyBioYwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggiRBgNVHREEggiIMIIIhIIeZWdvaS5pbmZvLmF1dG9tYXF1aW5hcmlhLmNv
LmFvghllZ29pLmluZm8uYXV0b3N1ZWNvLmNvLm5hghhnby5jYXBpdGFsY2luZWdl
dGljYS5jb22CHmluZm8uaW5mb3JtZWNvbXVuaWNhY2FvLmNvbS5icoIYbWt0LjI0
aG9yYXNvbmxpbmUuY29tLmJyghZta3QuYWJyZXVhZHZvZ2Fkb3MuY29tghVta3Qu
YWNhZGVtaWF2b3J0YWwucHSCE21rdC5hbHRpbm9yYXBvc28ucHSCG21rdC5hbmFt
bmVzZXF1ZXZlbmRlLmNvbS5icoIVbWt0LmFuZHJlaWFtYWNoYWRvLnB0ghNta3Qu
YW5maXAtc3Aub3JnLmJyghNta3QuYXBhbWFnaXMub3JnLmJyghBta3QuYXJ0ZXZh
c2kuY29tgg9ta3QuYXNkci5vcmcuYnKCD21rdC5heGlvbWJyLmNvbYISbWt0LmJl
ZXhjZWxsZW50LnB0ghhta3QuYnJhc2lscmV2ZXJzby5jb20uYnKCG21rdC5jYXNh
ZG9zZXNwaXJpdG9zLmNvbS5icoIVbWt0LmNlbnRyb2FicmFudGVzLnB0ghNta3Qu
Y2VwZWRjdXJzb3MuY29tghFta3QuY2luZW1hdGVjYS5wdIITbWt0LmNvbnRpc3lz
dGVtcy5wdIINbWt0LmRybXNuLmNvbYIYbWt0LmVkaXRvcnF1YWxpdHkuY29tLmJy
ghFta3QuZWVnLnVtaW5oby5wdIIRbWt0LmVsb3Utc29seWQucHSCGW1rdC5lbmNv
bnRyb25hY2lvbmFsaGQucHSCFG1rdC5lbnRyZXBvc3RvLmNvLm16ghNta3QuZXNj
b2xhZGV5b2dhLnB0ghtta3QuZXN0ZWxhLm15bXlzdGljbGFuZC5jb22CEm1rdC5l
eHBhbnNhby5jby5hb4IXbWt0LmZyLm15bXlzdGljbGFuZC5jb22CEG1rdC5nYXNw
b3J0by5vcmeCEG1rdC5naW50YXF1YS5jb22CE21rdC5ncnVwb2NvbnRyb2wuY2+C
D21rdC5ncnVwb3J0cC5wdIIWbWt0Lmhvcm9zY29wZWR1am91ci5ldYIPbWt0Lmlo
cmIuY29tLmJyghFta3QuaW1vY29uY2VwdC5wdIIUbWt0LmpsYWFkdm9nYWRvcy5j
b22CFm1rdC5qb3JnZXNhYmluby5jb20uYnKCFG1rdC5sZWlsb2VzYnIuY29tLmJy
gg5ta3QubG9qYWtwZi5wdIIObWt0Lm0yYS5jb20ucHSCFm1rdC5tYXhpZmxleGNv
bGNob24uZXOCEW1rdC5tZWRpZGVudGFsLnB0gg9ta3QubW92aWZsb3IucHSCE21r
dC5tdW5kb21pc3RpY28uZXWCFG1rdC5teW15c3RpY3N0YXIuY29tghNta3QubXlt
eXN0aWNzdW4uY29tghRta3QubXlzdGlzY2hld2VsdC5kZYISbWt0Lm5hdXRpa2Eu
Y29tLmJyghxta3QubmV3c2NsaW5pY2FkYXNjb25jaGFzLnB0ghxta3QubmV3c2xl
dHRlcnMubW9udGVwaW8ub3JngiNta3QucGVjdWFyaWFicmFzaWxhc3Nlc3Nvcmlh
LmNvbS5icoIVbWt0LnBlZHJhc3Jhc2dhZGFzLnB0ghZta3QucG92b2FoYXJsZXlk
YXlzLnB0gh9ta3QucmFkYXJicmFzaWxmZXN0aXZhaXMuY29tLmJygg5ta3QucmF0
YXR1aS5wdIIZbWt0LnJldmlzdGEtYXJ0aWxoYXJpYS5wdIINbWt0LnJpbGwud29y
a4IMbWt0LnJvY2hhLnB0gg1ta3Quc2lnbmVzLmVzghRta3Quc2luYWZyZXNwLm9y
Zy5icoISbWt0LnNpbnRlcHMub3JnLmJygg9ta3Quc2lzcHJvZC5jb22CC21rdC5z
aXh0LnB0gg5ta3Quc25zLmdvdi5wdIITbWt0LnNveXNlcnZpZG9yLmNvbYISbWt0
LnRhZ3VzdmFsbGV5LnB0gg9ta3QudGVjbHVzYS5jb22CFG1rdC50b2RvbXVuZG8u
dHVyLmJyghxta3QudW5pbWVkcmlvY29tdW5pY2EuY29tLmJyghZta3QudW9uLWlt
b2JpbGlhcmlhLnB0gg9ta3QudmFsb3JjYXIucHSCGm1rdC52YWxxdWlyaWFhcmVu
YXMuY29tLmJyghZta3Qudml0YXF1YW50dW0uY29tLmJyghhta3Qudml2YW1haXNm
ZWxpei5jb20uYnKCFW1rdC54ZHNvZnR3YXJlLmNvbS5icoIhbWt0LnpvbmFjZXJl
YWxpc3RhLWF0YWNhZG8uY29tLmJygh9ta3Quem9uYWNlcmVhbGlzdGFvbmxpbmUu
Y29tLmJyghVta3QxLm15bXlzdGljbGFuZC5jb22CF21rdDIuaG9yb3Njb3BlZHVq
b3VyLmV1ghRta3QyLm15bXlzdGljd2F5LmNvbYIabWt0My5tZWluZS1oZWxsc2Vo
ZXJpbi5jb22CFG1rdDMubXlteXN0aWNzdW4uY29tghFta3RkYWNpYS5jYXJieS5w
dIIWbWt0bWl0c3ViaXNoaS5jYXJieS5wdIISbWt0bmlzc2FuLmNhcmJ5LnB0ghNt
a3RyZW5hdWx0LmNhcmJ5LnB0ghZta3R2b2xrc3dhZ2VuLmNhcmJ5LnB0gg1uZXdz
Lmdvd2ViLnB0ghVuZXdzLm15bXlzdGljbGFuZC5jb22CFG5ld3MubmFzY2VjbWUu
Y29tLmJygh1uZXdzbGV0dGVyLnJvdGFkb3JvbWFuaWNvLmNvbYIWbmV3c2xldHRl
ci50ZWs0bGlmZS5wdIIYbmV3c2xldHRlcnMucm9iYmlhbGFjLnB0MBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLq+Ys3QAABAMASDBGAiEAyksGJ8Di
iEirhRdvE+Yg1GdqbHmbul6qkTp7vfMf9uwCIQDZANSfK9152ORLw+L8dwJtQGru
Sm+jMdbvjS5D4bj+ogB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABi6vmLOUAAAQDAEgwRgIhAIext6jzuztZJ6KgHjmhyywdwRUdUoLITw0kwEns
HPbeAiEAykrbGpl3YQ+nYOWRY0bpcOq7wmEwCpoWhdAPyx/rcCEwDQYJKoZIhvcN
AQELBQADggEBAHmYB9MmSX5EAePylKrs1SYZG04th8RmLbDxd5DX29Ar71bo2gwj
N6DAp/88ProBDGmvVJTzPDFUA0dONbmopVMlYAXsAIbM128isdBZCLVcoPmY0iMc
6obO15gQtEXJX+xw7UrdsWCRdiSO8uO6Yb6B3UgAhHQAAU0TAamdG7uUEHKGtPF3
etNkXgyh4MwWau+xqUS/BA5iS7Kt8OK1KTRTMSzAv7tWgM0fwLzLh4QibCxEGHFD
12U5HAHlfDSA1JnFeQvE5LjwbwxJwe2m3S/C9vTaMm7PYjqUTkeKqPUQ733jrsmy
0aTT5V1z4L83jtL+1Hs+6ytwUzfLkFhhWb8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO+tnie7C3H3lTTDDuwn
rLxq5oDyQvDPrkluqVh25+EaJ3gBhY2cmmCHx++LMFskE8ZKNBSnCoBWwYSAQAhn
WMiigBlqs/z1QekQMaQFE0VSQH8sOaf97cwzJdG5nr9IPLqVQxMCuOHbS8KDIqa5
obQIy5Fj9rdOWL4Qbd0jr5i/RFcJfRBfkXVKG1BK/jAHXuuXm6oZ7jXMNTsjLU36
rMtG4BV3l0Z5JgfbJMJzZGb6VmzXV87EZdIcLlkJvQNl3BIvJZjpkBAEJH2MjMvV
ZMPfHqb2ultQFDDr5aifIhaSz0BTzsQ5/YNBqJp0lrHBxEaMw/s2ihY9Lp96iuyz
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408211890022416493366085656902522160747054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 21:27:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 21:27:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.valorcar.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18296505637815035682340891040186973933145654782493737274463957657977843007183868893224761695596219964354007291901528817597710683683092672116319808889067976874563513200461078641949270936370307299878682309342651945738063606933331937408336670634307247722494653612416257813217493544192455818427667454907784173257649019034086512020450914685207111361923496200894854458236335047232140793260565314297364832300327461388768844925153971571776756963438283053738311659148080489539302576896693674057343530406649720795915190253124985256281167911423334877621974266829451413058048598017095107879068555391207845798276508110901918610241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fbf4189da0278cebe5076ee4db818425c818a86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.automaquinaria.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.co.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.capitalcinegetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.informecomunicacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.24horasonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abreuadvogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiavortal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.altinoraposo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.anamnesequevende.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.andreiamachado.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.anfip-sp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apamagis.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.artevasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.asdr.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.axiombr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.beexcellent.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilreverso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casadosespiritos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centroabrantes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cepedcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cinemateca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contisystems.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.drmsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.editorquality.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elou-solyd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.encontronacionalhd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.entreposto.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoladeyoga.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estela.mymysticland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.expansao.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fr.mymysticland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gasporto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gintaqua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupocontrol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gruportp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.horoscopedujour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ihrb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imoconcept.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jlaadvogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jorgesabino.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leiloesbr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojakpf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.m2a.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maxiflexcolchon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medidental.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.moviflor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mundomistico.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mymysticstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mymysticsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mystischewelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nautika.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newsclinicadasconchas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newsletters.montepio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pecuariabrasilassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pedrasrasgadas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.povoaharleydays.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radarbrasilfestivais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ratatui.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.revista-artilharia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rill.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rocha.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.signes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinteps.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sisprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sixt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sns.gov.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soyservidor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tagusvalley.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.teclusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.todomundo.tur.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unimedriocomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uon-imobiliaria.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valorcar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valquiriaarenas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitaquantum.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vivamaisfeliz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xdsoftware.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealista-atacado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealistaonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt1.mymysticland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.horoscopedujour.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.mymysticway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt3.meine-hellseherin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt3.mymysticsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktdacia.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktmitsubishi.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktnissan.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktrenault.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktvolkswagen.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.goweb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.mymysticland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.nascecme.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.rotadoromanico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.tek4life.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.robbialac.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018babe62cdd0000040300483046022100ca4b0627c0e28848ab85176f13e620d4676a6c799bba5eaa913a7bbdf31ff6ec022100d900d49f2bdd79d8e44bc3e2fc77026d406aee4a6fa331d6ef8d2e43e1b8fea2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018babe62ce5000004030048304602210087b1b7a8f3bb3b5927a2a01e39a1cb2c1dc1151d5282c84f0d24c049ec1cf6de022100ca4adb1a9977610fa760e5916346e970eabbc261300a9a1685d00fcb1feb7021
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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