jewellery.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:0e:3e:a5:e1:ef:6f:32:54:46:7c:2e:31:19:35:5d:ea was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jewellery.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:0e:3e:a5:e1:ef:6f:32:54:46:7c:2e:31:19:35:5d:ea
Serial Number (int): 434559517036882658338284300116033849875946
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:7e:b2:00:cc:ea:33:e2:f2:1b:53:02:77:9b:01:a8:b9:42:d9:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:9e:0b:bf:fc:9e:43:6d:15:55:a6:38:37:e5:2a:c6:82:4d:e9:40
Fingerprint (sha256): 14:bc:4a:34:e0:f3:ee:e2:b1:88:bc:48:f7:19:90:de:03:13:a4:6c:74:2c:2a:0e:24:ee:c5:cb:06:82:ea:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jewellery.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jewellery.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atlassrr.com
*.auction.sg
*.buliva.com
*.calendar.com.sg
*.calendar.sg
*.christmas.sg
*.classified.sg
*.cloudtranscription.com.au
*.creativekidsstuff.com
*.cryptocorporation.com
*.cumpusa.com
*.cybersecuritycourses.com.au
*.damobux.com
*.dental.sg
*.digitalearning.com.au
*.evian.me
*.flowers.com.sg
*.food.sg
*.forget.com.au
*.forum.sg
*.furniture-gallery-usa.com
*.hainanairlines.cm
*.health.com.sg
*.internet.com.sg
*.jewellery.sg
*.lawyers.sg
*.lederarmband.com
*.loans.sg
*.love.sg
*.markssandspencer.com
*.mindtoools.com
*.moneychanger.com.sg
*.moneychanger.sg
*.nycconcertguide.com
*.permeable.com.au
*.programmiert.de
*.protectbed.com
*.restaurant.sg
*.soccer.com.sg
*.sport.sg
*.streetsmobiledetailing.com
*.ticketing.sg
*.tnccedu.com
*.tv.com.sg
*.valentines.sg
*.vibaza.com
*.weddings.com.sg
*.women.sg
*.x69dl.com
*.zafebank.com
atlassrr.com
auction.sg
buliva.com
calendar.com.sg
calendar.sg
christmas.sg
classified.sg
cloudtranscription.com.au
creativekidsstuff.com
cryptocorporation.com
cumpusa.com
cybersecuritycourses.com.au
damobux.com
dental.sg
digitalearning.com.au
evian.me
flowers.com.sg
food.sg
forget.com.au
forum.sg
furniture-gallery-usa.com
hainanairlines.cm
health.com.sg
internet.com.sg
jewellery.sg
lawyers.sg
lederarmband.com
loans.sg
love.sg
markssandspencer.com
mindtoools.com
moneychanger.com.sg
moneychanger.sg
nycconcertguide.com
permeable.com.au
programmiert.de
protectbed.com
restaurant.sg
soccer.com.sg
sport.sg
streetsmobiledetailing.com
ticketing.sg
tnccedu.com
tv.com.sg
valentines.sg
vibaza.com
weddings.com.sg
women.sg
x69dl.com
zafebank.com

Other certificates including the domain name jewellery.sg

(limited to 100 certificates)
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
laundry.com.sg

Certificate

The complete raw certificate details for jewellery.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMdDCCC1ygAwIBAgISBP0OPqXh728yVEZ8LjEZNV3qMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUyMTU1NDdaFw0yNDA2MTMyMTU1NDZaMBcxFTATBgNVBAMT
DGpld2VsbGVyeS5zZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKBi
MMbOd6oK8hNtKAFR/530fXmo30a+UmYU826l/DqPahnk8V3kWQYdDQsgtmRsWF2v
hIVX5SUrji5B1fDIOIOrCQ8nr6wBiJ8ghrior2NbvtghpZ/XPCxvyNFSuTUcNtqC
H+BcqF4IDsfqhAulYrPPnmjoUm94iEUsydCS+aKtTwjmdOceQfK3C6D80dH+kq+H
rzksiUYEAZd+oJhLDUY7YhAF9dDpROasSfznvmMfgP9FpvYTTEE2DG3HQam8Sznw
DUzVcqLb4rZS9+vCNvQ3GTL7fD7F1f4PEB3N8L7cuTSxHKHJMKeCBtzqNKMLoh8q
34AlvKZNgS8VRlOaSWjvq0SbEGv9cRsH5Go2nQof5cNhXDYRMQ5zv+b1F7ThJeek
hCS1BYMLXh0hoDRf9keHfbN+UYMJB3697Bh3jY0cSRuZ9EdkIiu/mOgwXBZO1Vo1
m2NpsF9vexlgh4OFYWsLIcQuV34qIjUBVd3G+qC6ZlwzLPdJ6p52R81lRxgZpu5C
FZs78GkQKh0XtW0O5DOqfagL/a6/F4UgaYpkFl83RKdaEoyIayzkrVA0v1xbleh7
xcrQqNV8e0nK/7ar1Qoc/2/njREA2RSfGdCkI5N111T6dihMlHVNkfpNwCLMD6kD
mar1ieH1vB+FSCAvJUBThJnF+HQKEqOJcdqvHPjBAgMBAAGjggidMIIImTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFGp+sgDM6jPi8htTAnebAai5QtlfMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIGowYDVR0RBIIGmjCCBpaCDiouYXRsYXNzcnIuY29t
ggwqLmF1Y3Rpb24uc2eCDCouYnVsaXZhLmNvbYIRKi5jYWxlbmRhci5jb20uc2eC
DSouY2FsZW5kYXIuc2eCDiouY2hyaXN0bWFzLnNngg8qLmNsYXNzaWZpZWQuc2eC
GyouY2xvdWR0cmFuc2NyaXB0aW9uLmNvbS5hdYIXKi5jcmVhdGl2ZWtpZHNzdHVm
Zi5jb22CFyouY3J5cHRvY29ycG9yYXRpb24uY29tgg0qLmN1bXB1c2EuY29tgh0q
LmN5YmVyc2VjdXJpdHljb3Vyc2VzLmNvbS5hdYINKi5kYW1vYnV4LmNvbYILKi5k
ZW50YWwuc2eCFyouZGlnaXRhbGVhcm5pbmcuY29tLmF1ggoqLmV2aWFuLm1lghAq
LmZsb3dlcnMuY29tLnNnggkqLmZvb2Quc2eCDyouZm9yZ2V0LmNvbS5hdYIKKi5m
b3J1bS5zZ4IbKi5mdXJuaXR1cmUtZ2FsbGVyeS11c2EuY29tghMqLmhhaW5hbmFp
cmxpbmVzLmNtgg8qLmhlYWx0aC5jb20uc2eCESouaW50ZXJuZXQuY29tLnNngg4q
Lmpld2VsbGVyeS5zZ4IMKi5sYXd5ZXJzLnNnghIqLmxlZGVyYXJtYmFuZC5jb22C
CioubG9hbnMuc2eCCSoubG92ZS5zZ4IWKi5tYXJrc3NhbmRzcGVuY2VyLmNvbYIQ
Ki5taW5kdG9vb2xzLmNvbYIVKi5tb25leWNoYW5nZXIuY29tLnNnghEqLm1vbmV5
Y2hhbmdlci5zZ4IVKi5ueWNjb25jZXJ0Z3VpZGUuY29tghIqLnBlcm1lYWJsZS5j
b20uYXWCESoucHJvZ3JhbW1pZXJ0LmRlghAqLnByb3RlY3RiZWQuY29tgg8qLnJl
c3RhdXJhbnQuc2eCDyouc29jY2VyLmNvbS5zZ4IKKi5zcG9ydC5zZ4IcKi5zdHJl
ZXRzbW9iaWxlZGV0YWlsaW5nLmNvbYIOKi50aWNrZXRpbmcuc2eCDSoudG5jY2Vk
dS5jb22CCyoudHYuY29tLnNngg8qLnZhbGVudGluZXMuc2eCDCoudmliYXphLmNv
bYIRKi53ZWRkaW5ncy5jb20uc2eCCioud29tZW4uc2eCCyoueDY5ZGwuY29tgg4q
LnphZmViYW5rLmNvbYIMYXRsYXNzcnIuY29tggphdWN0aW9uLnNnggpidWxpdmEu
Y29tgg9jYWxlbmRhci5jb20uc2eCC2NhbGVuZGFyLnNnggxjaHJpc3RtYXMuc2eC
DWNsYXNzaWZpZWQuc2eCGWNsb3VkdHJhbnNjcmlwdGlvbi5jb20uYXWCFWNyZWF0
aXZla2lkc3N0dWZmLmNvbYIVY3J5cHRvY29ycG9yYXRpb24uY29tggtjdW1wdXNh
LmNvbYIbY3liZXJzZWN1cml0eWNvdXJzZXMuY29tLmF1ggtkYW1vYnV4LmNvbYIJ
ZGVudGFsLnNnghVkaWdpdGFsZWFybmluZy5jb20uYXWCCGV2aWFuLm1lgg5mbG93
ZXJzLmNvbS5zZ4IHZm9vZC5zZ4INZm9yZ2V0LmNvbS5hdYIIZm9ydW0uc2eCGWZ1
cm5pdHVyZS1nYWxsZXJ5LXVzYS5jb22CEWhhaW5hbmFpcmxpbmVzLmNtgg1oZWFs
dGguY29tLnNngg9pbnRlcm5ldC5jb20uc2eCDGpld2VsbGVyeS5zZ4IKbGF3eWVy
cy5zZ4IQbGVkZXJhcm1iYW5kLmNvbYIIbG9hbnMuc2eCB2xvdmUuc2eCFG1hcmtz
c2FuZHNwZW5jZXIuY29tgg5taW5kdG9vb2xzLmNvbYITbW9uZXljaGFuZ2VyLmNv
bS5zZ4IPbW9uZXljaGFuZ2VyLnNnghNueWNjb25jZXJ0Z3VpZGUuY29tghBwZXJt
ZWFibGUuY29tLmF1gg9wcm9ncmFtbWllcnQuZGWCDnByb3RlY3RiZWQuY29tgg1y
ZXN0YXVyYW50LnNngg1zb2NjZXIuY29tLnNngghzcG9ydC5zZ4Iac3RyZWV0c21v
YmlsZWRldGFpbGluZy5jb22CDHRpY2tldGluZy5zZ4ILdG5jY2VkdS5jb22CCXR2
LmNvbS5zZ4INdmFsZW50aW5lcy5zZ4IKdmliYXphLmNvbYIPd2VkZGluZ3MuY29t
LnNnggh3b21lbi5zZ4IJeDY5ZGwuY29tggx6YWZlYmFuay5jb20wEwYDVR0gBAww
CjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY5EVCCPAAAEAwBHMEUCIQDdC8/vVkxg
YSCoT7qnyO9LkjX+HdxUvq18G9WD8rJi6gIgZhRFFeCPOxey2QItxvas1wQlTrXI
aF/kRDFYCRzIVREAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAA
AY5EVCDTAAAEAwBIMEYCIQC1W0P090Gxw/htH728dOIkG9VH8D84WQZ8uFJVoYbo
ygIhALscZT5nUBrcEQRDXkOemnc7nDQRP512SbRePxBOy/pFMA0GCSqGSIb3DQEB
CwUAA4IBAQA8+pUoemfhIlb59KqZCEQpX/6sHVuEBVTK69cmB6003+yrvOstot1Q
Xx50PTbZf0GcvgSUf1GiDrWabzDgfgf5eYe5cEwJe6CzMCS9V0QMe6wupQLB0HUq
yi5oLGRzycEad52lIR9ntT/8yx+dhWramY2ffP4RnY9Psv/97wspFAvs7k6l8FkE
/juad/3jCvMOmpdJ5xWR4vk1sHnWx7+Ad9jTtMsmVDxgjicwacM51s5+xi1TA/e6
DA9GBjhgV/f6ZkNluypB138rB/qK1T9o82cEupMZsEijJIWs8G96kAn/+LBfZTzW
8xbnxwi7fQXsUGXbBkFC+vVga//Nw9AR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434559517036882658338284300116033849875946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 21:55:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 21:55:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jewellery.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654307825991498961060291304787908482785948640758602945466780565548403761990432771478651759002968733938368831986319949907922871740457806725128640856233566928091752527355844339715229030025578037145652853560215198340912573885644310749632069250531116338412085887401534644768559821463828077462566270751898497171062039059828554180047128068927564098614038333811514298804362833947083227106487574915020150556791320011097255301533483944317492746261672735079799017939145164118094884452308291254190179208621557981037491053765147886679317095934856950238887836317343569983571777184173454259796903471002255521390145328217986289671714808774877701529494974558908433940439424703800654433262119074535749621994075916576189106445494302259601195900821319037145601696503930905797712153693746925484779192973481660389414482683318572919454515951027355143293142561695351072567476188992607580454196548398309728957141753065295664123913612214501364058517499631312615133743533532356925396279424454204887911438385192835384621316606804588804411527341807371141993876119058842875490206059637072227386536556893320915497218975360224318894946876187121645852333204453518148619744526037897484314634427973184814234297308174352919931194652022922529874163876100793002184472769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a7eb200ccea33e2f21b5302779b01a8b942d95f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlassrr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buliva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendar.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christmas.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudtranscription.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativekidsstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptocorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumpusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybersecuritycourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalearning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evian.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forget.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forum.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture-gallery-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hainanairlines.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawyers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lederarmband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loans.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.love.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markssandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindtoools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nycconcertguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.permeable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.programmiert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protectbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccer.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmobiledetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketing.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnccedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valentines.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x69dl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zafebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlassrr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buliva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmas.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudtranscription.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativekidsstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumpusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecuritycourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalearning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evian.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forget.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture-gallery-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hainanairlines.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lederarmband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'love.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markssandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindtoools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycconcertguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permeable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programmiert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccer.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmobiledetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnccedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentines.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x69dl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zafebank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4454208f0000040300473045022100dd0bcfef564c606120a84fbaa7c8ef4b9235fe1ddc54bead7c1bd583f2b262ea022066144515e08f3b17b2d9022dc6f6acd704254eb5c8685fe4443158091cc85511007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e445420d30000040300483046022100b55b43f4f741b1c3f86d1fbdbc74e2241bd547f03f3859067cb85255a186e8ca022100bb1c653e67501adc1104435e439e9a773b9c34113f9d7649b45e3f104ecbfa45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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