hr.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:dd:ff:53:f0:c3:d8:68:85:ac:27:55:24:17:7a:7e:c5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hr.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:dd:ff:53:f0:c3:d8:68:85:ac:27:55:24:17:7a:7e:c5
Serial Number (int): 428370302711823347130878494201984379944645
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:46:14:b2:92:89:9a:0f:a0:d4:28:7c:24:e8:0e:df:39:ee:9f:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:8f:76:91:ee:98:9a:9a:f9:30:83:e2:78:d2:83:44:f2:f6:ed:24
Fingerprint (sha256): 1c:bc:fd:35:79:3b:07:f4:48:46:7b:ed:1a:89:1a:3a:cc:63:3a:be:f8:86:90:65:e0:71:d0:72:31:00:a9:13

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hr.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hr.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aeritrade.com
*.astrolightsolar.com
*.auctions.sg
*.bnet.am
*.bowling.sg
*.bridal.sg
*.brksleepurns.com
*.citationsspplus.com
*.cosmetics.sg
*.courier.com.sg
*.cqrgurus.com
*.cruise.com.sg
*.escorts.sg
*.exercise.sg
*.exhibition.sg
*.friendshipvein.top
*.gcostco.com
*.gifts.sg
*.goldinar.com
*.grupomatheus.com
*.gubitosa.com
*.health.sg
*.hotel.sg
*.hr.sg
*.ivanclothing.shop
*.kimita.de
*.laundry.sg
*.lezkissjp.net
*.marcusclothing.shop
*.meyersbaby.shop
*.michikopianoblog.com
*.mymclaneco.com
*.nurses-aide.com
*.online.sg
*.orchidmassagereno.com
*.pickandpullsa.com
*.poem.com.sg
*.privatemovies.cc
*.realty.sg
*.sale.com.sg
*.sale.sg
*.shares.sg
*.shop.com.sg
*.startpretending.com
*.storage.com.sg
*.store.com.sg
*.survey.sg
*.susanhome.shop
*.transport.sg
*.trondice.org
aeritrade.com
astrolightsolar.com
auctions.sg
bnet.am
bowling.sg
bridal.sg
brksleepurns.com
citationsspplus.com
cosmetics.sg
courier.com.sg
cqrgurus.com
cruise.com.sg
escorts.sg
exercise.sg
exhibition.sg
friendshipvein.top
gcostco.com
gifts.sg
goldinar.com
grupomatheus.com
gubitosa.com
health.sg
hotel.sg
hr.sg
ivanclothing.shop
kimita.de
laundry.sg
lezkissjp.net
marcusclothing.shop
meyersbaby.shop
michikopianoblog.com
mymclaneco.com
nurses-aide.com
online.sg
orchidmassagereno.com
pickandpullsa.com
poem.com.sg
privatemovies.cc
realty.sg
sale.com.sg
sale.sg
shares.sg
shop.com.sg
startpretending.com
storage.com.sg
store.com.sg
survey.sg
susanhome.shop
transport.sg
trondice.org

Other certificates including the domain name hr.sg

(limited to 100 certificates)
hr.sg
hr.sg
arrowfence-br.com
arrowfence-br.com
jewellery.sg
jewellery.sg
hr.sg
courses.sg
hr.sg

Certificate

The complete raw certificate details for hr.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428370302711823347130878494201984379944645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 21:56:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 21:56:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hr.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946663184270139242516572059377226839690433146426863542304792350307913720676432611191012647993382849915914395333915842898659632231159506798657706317859541644983891883742686543526996670005475201271530114593366010676342851189818001358378569675221143714135626752204806724181559536096524687633157290019546625260714493525760179433401142069566136462326030672765468638939527558046490137007459248171101483101190448469244319044723493027820255335219167850959954808554885295763949461428702633382726183959762501954011766319131659095471664597501169751340446051015230509935151748082931980429275089647258914192259661836738822471722645165669795654960142318012694180471819858982128521563954564715623843138189242926228478645146724489874073003844903867768439810665576387635572719981753372437239543177184423775673119956188062203200478771537583880324054757534786843106663085961024812985502564004089755022475610421753043033645096032785857569566506077617441693625404824918518920252763892194592528523378500458862706824882383334607980485586035388070387022474075223232955416947592522122895938686464489451700441743565125999573181205322498660578266169326078106224553149212596421091465320161892554199054156752818382977363322132593945642012803596218924221481961451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d44614b292899a0fa0d4287c24e80edf39ee9fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeritrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowling.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridal.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brksleepurns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citationsspplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmetics.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escorts.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exercise.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendshipvein.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifts.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupomatheus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivanclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundry.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lezkissjp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcusclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyersbaby.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michikopianoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymclaneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nurses-aide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchidmassagereno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickandpullsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatemovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sale.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sale.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shares.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpretending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survey.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susanhome.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trondice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeritrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowling.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridal.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brksleepurns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citationsspplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmetics.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escorts.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exercise.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendshipvein.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomatheus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundry.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lezkissjp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcusclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyersbaby.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michikopianoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymclaneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurses-aide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchidmassagereno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickandpullsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatemovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sale.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sale.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shares.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpretending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susanhome.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trondice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4454ebb50000040300473045022100a87703d87cff4ab4644fef8f1c0a56fccfc73119a8f685712fb1cb12d8ff4cd00220575ef166cbdd8cec430fe17b8dce1cd5f419253d9c5ef74f26926e164f7484fd00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4454ec21000004030046304402205ee745eddbf7e247f76d6d13c73d56aca17157d265dc5318df5e0a019c79eb0e022033bbb0d52cb0422a750dae4877bb9e7196e4e8247fc5c0cff00409535b0e30dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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