hr.sg
Issued by R3
About this certificate
This digital certificate with serial number 03:e5:86:2d:86:ab:3e:ff:57:4c:58:0f:18:00:a7:06:ce:c4 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hr.sg
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:e5:86:2d:86:ab:3e:ff:57:4c:58:0f:18:00:a7:06:ce:c4Serial Number (int): 339439872756379860305407023166065591373508
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 69:32:b3:45:56:b0:07:24:95:2d:f9:a0:b8:d6:5b:28:e4:e7:b9:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3b:92:31:26:50:f6:27:fb:ff:66:7b:e6:42:51:b7:2c:1c:d4:79:37
Fingerprint (sha256): 00:cb:1b:39:6d:4d:24:09:87:35:82:94:10:a5:db:18:3e:34:5e:67:a2:34:79:58:72:33:75:79:2a:54:0e:8e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hr.sg
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hr.sg
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aktion-neue-nachbarn-alt.de
*.akumoto.de
*.astrolightsolar.com
*.auctions.sg
*.bnet.am
*.carbonnade.com
*.cartea.de
*.chatrandm.com
*.classifiedads.sg
*.courier.com.sg
*.cqrgurus.com
*.cruise.com.sg
*.curtains.sg
*.enetag.de
*.exhibition.sg
*.food.com.sg
*.friendshipvein.top
*.gcostco.com
*.gifts.sg
*.gubitosa.com
*.hotel.sg
*.hr.sg
*.hurra50plus.de
*.ivanclothing.shop
*.kimita.de
*.marcusclothing.shop
*.mcmakker.de
*.meyersbaby.shop
*.michikopianoblog.com
*.orchardroad.sg
*.outdoordemo.com
*.poem.com.sg
*.qquoka.de
*.realty.sg
*.restaurant.com.sg
*.riksfm.se
*.rusvideochat.com
*.sanja-wandkunst.de
*.scholarship.sg
*.shares.com.sg
*.startpretending.com
*.storage.com.sg
*.storage.sg
*.store.com.sg
*.susanhome.shop
*.tacticalatzengear.de
*.tdameritrasde.com
*.transport.sg
*.trondice.org
*.wedding.sg
aktion-neue-nachbarn-alt.de
akumoto.de
astrolightsolar.com
auctions.sg
bnet.am
carbonnade.com
cartea.de
chatrandm.com
classifiedads.sg
courier.com.sg
cqrgurus.com
cruise.com.sg
curtains.sg
enetag.de
exhibition.sg
food.com.sg
friendshipvein.top
gcostco.com
gifts.sg
gubitosa.com
hotel.sg
hr.sg
hurra50plus.de
ivanclothing.shop
kimita.de
marcusclothing.shop
mcmakker.de
meyersbaby.shop
michikopianoblog.com
orchardroad.sg
outdoordemo.com
poem.com.sg
qquoka.de
realty.sg
restaurant.com.sg
riksfm.se
rusvideochat.com
sanja-wandkunst.de
scholarship.sg
shares.com.sg
startpretending.com
storage.com.sg
storage.sg
store.com.sg
susanhome.shop
tacticalatzengear.de
tdameritrasde.com
transport.sg
trondice.org
wedding.sg
*.akumoto.de
*.astrolightsolar.com
*.auctions.sg
*.bnet.am
*.carbonnade.com
*.cartea.de
*.chatrandm.com
*.classifiedads.sg
*.courier.com.sg
*.cqrgurus.com
*.cruise.com.sg
*.curtains.sg
*.enetag.de
*.exhibition.sg
*.food.com.sg
*.friendshipvein.top
*.gcostco.com
*.gifts.sg
*.gubitosa.com
*.hotel.sg
*.hr.sg
*.hurra50plus.de
*.ivanclothing.shop
*.kimita.de
*.marcusclothing.shop
*.mcmakker.de
*.meyersbaby.shop
*.michikopianoblog.com
*.orchardroad.sg
*.outdoordemo.com
*.poem.com.sg
*.qquoka.de
*.realty.sg
*.restaurant.com.sg
*.riksfm.se
*.rusvideochat.com
*.sanja-wandkunst.de
*.scholarship.sg
*.shares.com.sg
*.startpretending.com
*.storage.com.sg
*.storage.sg
*.store.com.sg
*.susanhome.shop
*.tacticalatzengear.de
*.tdameritrasde.com
*.transport.sg
*.trondice.org
*.wedding.sg
aktion-neue-nachbarn-alt.de
akumoto.de
astrolightsolar.com
auctions.sg
bnet.am
carbonnade.com
cartea.de
chatrandm.com
classifiedads.sg
courier.com.sg
cqrgurus.com
cruise.com.sg
curtains.sg
enetag.de
exhibition.sg
food.com.sg
friendshipvein.top
gcostco.com
gifts.sg
gubitosa.com
hotel.sg
hr.sg
hurra50plus.de
ivanclothing.shop
kimita.de
marcusclothing.shop
mcmakker.de
meyersbaby.shop
michikopianoblog.com
orchardroad.sg
outdoordemo.com
poem.com.sg
qquoka.de
realty.sg
restaurant.com.sg
riksfm.se
rusvideochat.com
sanja-wandkunst.de
scholarship.sg
shares.com.sg
startpretending.com
storage.com.sg
storage.sg
store.com.sg
susanhome.shop
tacticalatzengear.de
tdameritrasde.com
transport.sg
trondice.org
wedding.sg
Other certificates including the domain name hr.sg
(limited to 100 certificates)
Certificate
The complete raw certificate details for hr.sg in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMLDCCCxSgAwIBAgISA+WGLYarPv9XTFgPGACnBs7EMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTQyMzAxMDhaFw0yNDA4MTIyMzAxMDdaMBAxDjAMBgNVBAMT BWhyLnNnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4rdYYR4KwDR1 KYWTMWmE77fOwjtcFTW+MOTY/FsvYLvuwaU2+9akpZxPxXgkF9rWvYvljEUec6X1 +isn48j+CCduyh2CqCqJGmraAWqGQ2njRMPs5n+yKJ6Lw86aQAvm94WkXW9km1Ex frNz+yobsES1jU4qmQ7sJvAcvVmLPzTo/oq2OnPPLowCzqPi0ugB58scou1pn4XP 2UebXu2zwOTIwwk9lnVdE3+K+xnbqgYmphkbOD0/4Ov8KA2GVG0TtvemooiWWvLN NPFC3V1BHGGlKegv6JrZpWcZGS7Ew5PBYe71JNIhvtKCFFkddUuSG/iNwQXvm/br 2ey5AHgIS1p+D5FriG2hV7j8R5QQVd++9zp+oBI14S8c+EnwaW8JRXEKJVTqjEGc 8Fxq9zc26HkX+hxBI0jsy+Np4r6nvrlOCMbrO8JoVcWwMc5Wxq/hLie/pP9ey3Kf tAsW4xASuBc2e3EV4cqWMOPdIht3b9flUZ8+qI2E1L0DR5ROJQoxcxf8miQACzG1 WQ2suhVk0xn29/eJ0mhRSBy2p7hlq4TFiDus7Vsf8U5Pq/sg4QZOsuvpbXXck1D/ heaLGU8xyUx66szUB3HpQX9NPM9tHIbBjpi45VuDVwHyrCGAt4+FQuXHdVGzqupP RPVzTDnt+W3EIXUTo7aS3LImVr/getECAwEAAaOCCFwwgghYMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUaTKzRVawBySVLfmguNZbKOTnuXcwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggZjBgNVHREEggZaMIIGVoIdKi5ha3Rpb24tbmV1ZS1uYWNoYmFy bi1hbHQuZGWCDCouYWt1bW90by5kZYIVKi5hc3Ryb2xpZ2h0c29sYXIuY29tgg0q LmF1Y3Rpb25zLnNnggkqLmJuZXQuYW2CECouY2FyYm9ubmFkZS5jb22CCyouY2Fy dGVhLmRlgg8qLmNoYXRyYW5kbS5jb22CEiouY2xhc3NpZmllZGFkcy5zZ4IQKi5j b3VyaWVyLmNvbS5zZ4IOKi5jcXJndXJ1cy5jb22CDyouY3J1aXNlLmNvbS5zZ4IN Ki5jdXJ0YWlucy5zZ4ILKi5lbmV0YWcuZGWCDyouZXhoaWJpdGlvbi5zZ4INKi5m b29kLmNvbS5zZ4IUKi5mcmllbmRzaGlwdmVpbi50b3CCDSouZ2Nvc3Rjby5jb22C CiouZ2lmdHMuc2eCDiouZ3ViaXRvc2EuY29tggoqLmhvdGVsLnNnggcqLmhyLnNn ghAqLmh1cnJhNTBwbHVzLmRlghMqLml2YW5jbG90aGluZy5zaG9wggsqLmtpbWl0 YS5kZYIVKi5tYXJjdXNjbG90aGluZy5zaG9wgg0qLm1jbWFra2VyLmRlghEqLm1l eWVyc2JhYnkuc2hvcIIWKi5taWNoaWtvcGlhbm9ibG9nLmNvbYIQKi5vcmNoYXJk cm9hZC5zZ4IRKi5vdXRkb29yZGVtby5jb22CDSoucG9lbS5jb20uc2eCCyoucXF1 b2thLmRlggsqLnJlYWx0eS5zZ4ITKi5yZXN0YXVyYW50LmNvbS5zZ4ILKi5yaWtz Zm0uc2WCEioucnVzdmlkZW9jaGF0LmNvbYIUKi5zYW5qYS13YW5ka3Vuc3QuZGWC ECouc2Nob2xhcnNoaXAuc2eCDyouc2hhcmVzLmNvbS5zZ4IVKi5zdGFydHByZXRl bmRpbmcuY29tghAqLnN0b3JhZ2UuY29tLnNnggwqLnN0b3JhZ2Uuc2eCDiouc3Rv cmUuY29tLnNnghAqLnN1c2FuaG9tZS5zaG9wghYqLnRhY3RpY2FsYXR6ZW5nZWFy LmRlghMqLnRkYW1lcml0cmFzZGUuY29tgg4qLnRyYW5zcG9ydC5zZ4IOKi50cm9u ZGljZS5vcmeCDCoud2VkZGluZy5zZ4IbYWt0aW9uLW5ldWUtbmFjaGJhcm4tYWx0 LmRlggpha3Vtb3RvLmRlghNhc3Ryb2xpZ2h0c29sYXIuY29tggthdWN0aW9ucy5z Z4IHYm5ldC5hbYIOY2FyYm9ubmFkZS5jb22CCWNhcnRlYS5kZYINY2hhdHJhbmRt LmNvbYIQY2xhc3NpZmllZGFkcy5zZ4IOY291cmllci5jb20uc2eCDGNxcmd1cnVz LmNvbYINY3J1aXNlLmNvbS5zZ4ILY3VydGFpbnMuc2eCCWVuZXRhZy5kZYINZXho aWJpdGlvbi5zZ4ILZm9vZC5jb20uc2eCEmZyaWVuZHNoaXB2ZWluLnRvcIILZ2Nv c3Rjby5jb22CCGdpZnRzLnNnggxndWJpdG9zYS5jb22CCGhvdGVsLnNnggVoci5z Z4IOaHVycmE1MHBsdXMuZGWCEWl2YW5jbG90aGluZy5zaG9wgglraW1pdGEuZGWC E21hcmN1c2Nsb3RoaW5nLnNob3CCC21jbWFra2VyLmRlgg9tZXllcnNiYWJ5LnNo b3CCFG1pY2hpa29waWFub2Jsb2cuY29tgg5vcmNoYXJkcm9hZC5zZ4IPb3V0ZG9v cmRlbW8uY29tggtwb2VtLmNvbS5zZ4IJcXF1b2thLmRlgglyZWFsdHkuc2eCEXJl c3RhdXJhbnQuY29tLnNngglyaWtzZm0uc2WCEHJ1c3ZpZGVvY2hhdC5jb22CEnNh bmphLXdhbmRrdW5zdC5kZYIOc2Nob2xhcnNoaXAuc2eCDXNoYXJlcy5jb20uc2eC E3N0YXJ0cHJldGVuZGluZy5jb22CDnN0b3JhZ2UuY29tLnNnggpzdG9yYWdlLnNn ggxzdG9yZS5jb20uc2eCDnN1c2FuaG9tZS5zaG9wghR0YWN0aWNhbGF0emVuZ2Vh ci5kZYIRdGRhbWVyaXRyYXNkZS5jb22CDHRyYW5zcG9ydC5zZ4IMdHJvbmRpY2Uu b3Jnggp3ZWRkaW5nLnNnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A AAGPeY2C2wAABAMARzBFAiADNz0rIVbZQDQut7O5PRBEaynb1Y/FR7iAnR6Ch2X/ CQIhAKZT1pdKPBzQkRYqXpvWV1LdnL4bR7SrqxENbGWd9v7VAHYA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGPeY2C1wAABAMARzBFAiEA6poWxpLk JCnkYocCafYplKkId0RgzVhlJEdsmFfSTG4CIGnJZvjxEVFhFqcoY2nDPuFNfGoX mkrIhmEmKzCIU21fMA0GCSqGSIb3DQEBCwUAA4IBAQBSnkh27vyIUw8nS/ee7iHP wQ5tsQveEZQb1IWB0ftXWHb5U0JycAtFDS8hb07f9bpkV1YDLz65UhrHldom8Z0i dd3hCe2tmsNjUapJ4sjKFbBEV+dUndJZuNFNnI4+3IX4evr4XwQ/2Vc/sFZLxlEU 3bd6ibn536HDarghviZv8wbBQWYogqBOEJOu10yHAQE9LrY3I/CdZUZt8M9QxC0b OZw20zpYDDd4NKJUrfYiWqz2hK2D/lElMwIxW9BV+9H2kJ7ZCDHQE9YV7sOwEYbT T7AiYaOJvT4bO8nq8zCH4D0Vaa+MAYcLizarvQenCeiu2RnE2jazUHKHvfTRKtwH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4rdYYR4KwDR1KYWTMWmE 77fOwjtcFTW+MOTY/FsvYLvuwaU2+9akpZxPxXgkF9rWvYvljEUec6X1+isn48j+ CCduyh2CqCqJGmraAWqGQ2njRMPs5n+yKJ6Lw86aQAvm94WkXW9km1ExfrNz+yob sES1jU4qmQ7sJvAcvVmLPzTo/oq2OnPPLowCzqPi0ugB58scou1pn4XP2UebXu2z wOTIwwk9lnVdE3+K+xnbqgYmphkbOD0/4Ov8KA2GVG0TtvemooiWWvLNNPFC3V1B HGGlKegv6JrZpWcZGS7Ew5PBYe71JNIhvtKCFFkddUuSG/iNwQXvm/br2ey5AHgI S1p+D5FriG2hV7j8R5QQVd++9zp+oBI14S8c+EnwaW8JRXEKJVTqjEGc8Fxq9zc2 6HkX+hxBI0jsy+Np4r6nvrlOCMbrO8JoVcWwMc5Wxq/hLie/pP9ey3KftAsW4xAS uBc2e3EV4cqWMOPdIht3b9flUZ8+qI2E1L0DR5ROJQoxcxf8miQACzG1WQ2suhVk 0xn29/eJ0mhRSBy2p7hlq4TFiDus7Vsf8U5Pq/sg4QZOsuvpbXXck1D/heaLGU8x yUx66szUB3HpQX9NPM9tHIbBjpi45VuDVwHyrCGAt4+FQuXHdVGzqupPRPVzTDnt +W3EIXUTo7aS3LImVr/getECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339439872756379860305407023166065591373508 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 23:01:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 23:01:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hr.sg' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924921369090098668367372902027712572429520469762691351842507983428869740384279504856437056375023197409063858240900864133283816071619760820922589436218124314930633850324088955977269806805018076563487728415656967560598693101802450697530269150759685653401868361398163439240159550502741696294106746677544049333097145594951609098697475414892178738202821295274418688065996670876087732324619802347644438861972637786730722361883828418389753531889766716359164723861020973058692696843730974521542087074478602192250221113559392885573226367337424519745860051824676331811138650494296976702078115115308338649256469371727453928658353362133803230455476737555752976251557100673534133624380126940271671814847105882319528675424725611842793034588567200349834054261658472605147368655753252911313529401889212016029194852521260192404335232945245345003953390055345673895545381122066183606459498328678378941242137740082332448086594910525905945977206312471894394320447575384235638864617536938330646007194492875075033154576422932149950090512504105723489056662616514111224434303540199326915605351527854634899108421901473329669637577916329781672879311252450736333907679032437016865778716704429439475178956392081018406699395729348972643515733502253371895287151313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6932b34556b00724952df9a0b8d65b28e4e7b977 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1626 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktion-neue-nachbarn-alt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akumoto.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrolightsolar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnet.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonnade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatrandm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classifiedads.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqrgurus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruise.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curtains.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enetag.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendshipvein.top' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcostco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifts.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gubitosa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurra50plus.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivanclothing.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimita.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcusclothing.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcmakker.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyersbaby.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michikopianoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchardroad.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoordemo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qquoka.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realty.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riksfm.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rusvideochat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanja-wandkunst.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholarship.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shares.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpretending.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susanhome.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacticalatzengear.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdameritrasde.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transport.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trondice.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedding.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktion-neue-nachbarn-alt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akumoto.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrolightsolar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnet.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonnade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatrandm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifiedads.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqrgurus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curtains.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enetag.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendshipvein.top' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcostco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gubitosa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurra50plus.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanclothing.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimita.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcusclothing.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcmakker.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyersbaby.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michikopianoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardroad.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoordemo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qquoka.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realty.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riksfm.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusvideochat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanja-wandkunst.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarship.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shares.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpretending.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susanhome.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacticalatzengear.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdameritrasde.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trondice.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedding.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f798d82db0000040300473045022003373d2b2156d940342eb7b3b93d10446b29dbd58fc547b8809d1e828765ff09022100a653d6974a3c1cd091162a5e9bd65752dd9cbe1b47b4abab110d6c659df6fed5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f798d82d70000040300473045022100ea9a16c692e42429e462870269f62994a908774460cd586524476c9857d24c6e022069c966f8f111516116a7286369c33ee14d7c6a179a4ac88661262b3088536d5f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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