jewellery.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:fc:ce:24:87:26:ed:f0:81:22:82:03:eb:18:2b:88:08:90 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jewellery.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:ce:24:87:26:ed:f0:81:22:82:03:eb:18:2b:88:08:90
Serial Number (int): 347362024890385438024118663465241735071888
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:7e:c2:82:4c:0a:b8:75:34:7a:42:16:e1:0f:3e:78:31:17:fa:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:eb:e6:5f:16:54:08:29:34:04:8b:58:f3:6f:19:5b:f8:92:0f:29
Fingerprint (sha256): 26:fe:ad:0a:71:25:d3:50:95:e4:8f:5b:1e:c0:02:85:6f:b2:56:ec:96:fc:68:91:73:f1:0d:0d:f7:c4:32:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jewellery.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jewellery.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.actionauctionsfl.com
*.almaarefqatar.com
*.androidurbano.com
*.astrolightsolar.com
*.auctions.sg
*.axious.com
*.beiza.com
*.betreit.de
*.blockchainbanco.com
*.bnet.am
*.brolar.com
*.calendar.sg
*.classified.sg
*.clsrksusa.com
*.codeswiftbic.com
*.collapsiblegear.com
*.comparesidebyside.com
*.cqrgurus.com
*.dental.sg
*.exhibition.sg
*.fitnessconnectionusa.com
*.food.sg
*.gcostco.com
*.getintouchwithus.com
*.grafiki.com
*.health.com.sg
*.internet.com.sg
*.jewellery.sg
*.kalaignar.com
*.kawande.com
*.kimita.de
*.moneychanger.com.sg
*.mythetesa.com
*.nrsoru.com
*.organiceco.com
*.p2guide.com
*.piovano.com
*.proenza.com
*.rentaminibus.com
*.seal.team
*.snakeproofgear.com
*.taqueriamorelia.com
*.tygartriveroutfitters.com
*.unmcradiology.net
*.watchani.me
*.weddings.com.sg
*.women.sg
*.www-kabelmail.de
*.xilar.com
*.yardarmbargrill.com
actionauctionsfl.com
almaarefqatar.com
androidurbano.com
astrolightsolar.com
auctions.sg
axious.com
beiza.com
betreit.de
blockchainbanco.com
bnet.am
brolar.com
calendar.sg
classified.sg
clsrksusa.com
codeswiftbic.com
collapsiblegear.com
comparesidebyside.com
cqrgurus.com
dental.sg
exhibition.sg
fitnessconnectionusa.com
food.sg
gcostco.com
getintouchwithus.com
grafiki.com
health.com.sg
internet.com.sg
jewellery.sg
kalaignar.com
kawande.com
kimita.de
moneychanger.com.sg
mythetesa.com
nrsoru.com
organiceco.com
p2guide.com
piovano.com
proenza.com
rentaminibus.com
seal.team
snakeproofgear.com
taqueriamorelia.com
tygartriveroutfitters.com
unmcradiology.net
watchani.me
weddings.com.sg
women.sg
www-kabelmail.de
xilar.com
yardarmbargrill.com

Other certificates including the domain name jewellery.sg

(limited to 100 certificates)
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
laundry.com.sg

Certificate

The complete raw certificate details for jewellery.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMczCCC1ugAwIBAgISA/zOJIcm7fCBIoID6xgriAiQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTkyMjM4NTFaFw0yMzEwMTcyMjM4NTBaMBcxFTATBgNVBAMT
DGpld2VsbGVyeS5zZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKBS
8mcSws7p5stMCwSUmyguwTnaiNkBlOtdeY7WgxrlUCfnxQJbpoWZ3C5Zo52CSeDU
4a8zEi9UWEbl0QHn4XDgOa4aHZyG5s5BW/U814PWsyxFriTAhb5Ptjgo5QfAc+ER
7lSB5p8f1o8XHtcer37aKIN03qWLDwaTc2tlGQ4qDKnvEB7f21h2FGEhCbvjDUFt
uIsACohx6mJ+YRZLvkchMxUZ1FOEDvASC+eQZFxrXw+cWS0vYqph/IBi5E1vDvOG
HtilgSAFCu8l8QBx+7TGIWJIWIhbqDTdlMCEMS3SfFe0r9LR/jlyQXKedKTfTdNU
pJeSbKnv5QBfWKTtfjUWm3GgU/b//ml9u1VPzpRmd+Yow53S1EvbLuSGozH27M8Q
xo3yIV49V0w8x4vRCcEaHSYvMw78g80G7c7MVSTal4HACyuN8bDBwJe6uAFKlCOW
rQfLrdXfNCQKAQSTLJPTFxJae0bjo1KqVvmMVkJBk/CUnLTZKNgf7ij/izPJ9PyN
9qfsOC5BwcW8Gcfp7K3Vdwr8XydhVDAilfE0Rd8dPFJy0m+Vuv7LK8nDSLWecd4h
ZM9W+cWLVR6FEkTwMfEkMTAwvVQDrPcPcLkaHhhvMxzncq0ZJtN9Sy+gFfZfV8N2
JZ9dvrq32z8wEwCZqLyF+RkaD6eN3xdvENSL1qCrAgMBAAGjggicMIIImDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFBt+woJMCrh1NHpCFuEPPngxF/oZMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIGowYDVR0RBIIGmjCCBpaCFiouYWN0aW9uYXVjdGlv
bnNmbC5jb22CEyouYWxtYWFyZWZxYXRhci5jb22CEyouYW5kcm9pZHVyYmFuby5j
b22CFSouYXN0cm9saWdodHNvbGFyLmNvbYINKi5hdWN0aW9ucy5zZ4IMKi5heGlv
dXMuY29tggsqLmJlaXphLmNvbYIMKi5iZXRyZWl0LmRlghUqLmJsb2NrY2hhaW5i
YW5jby5jb22CCSouYm5ldC5hbYIMKi5icm9sYXIuY29tgg0qLmNhbGVuZGFyLnNn
gg8qLmNsYXNzaWZpZWQuc2eCDyouY2xzcmtzdXNhLmNvbYISKi5jb2Rlc3dpZnRi
aWMuY29tghUqLmNvbGxhcHNpYmxlZ2Vhci5jb22CFyouY29tcGFyZXNpZGVieXNp
ZGUuY29tgg4qLmNxcmd1cnVzLmNvbYILKi5kZW50YWwuc2eCDyouZXhoaWJpdGlv
bi5zZ4IaKi5maXRuZXNzY29ubmVjdGlvbnVzYS5jb22CCSouZm9vZC5zZ4INKi5n
Y29zdGNvLmNvbYIWKi5nZXRpbnRvdWNod2l0aHVzLmNvbYINKi5ncmFmaWtpLmNv
bYIPKi5oZWFsdGguY29tLnNnghEqLmludGVybmV0LmNvbS5zZ4IOKi5qZXdlbGxl
cnkuc2eCDyoua2FsYWlnbmFyLmNvbYINKi5rYXdhbmRlLmNvbYILKi5raW1pdGEu
ZGWCFSoubW9uZXljaGFuZ2VyLmNvbS5zZ4IPKi5teXRoZXRlc2EuY29tggwqLm5y
c29ydS5jb22CECoub3JnYW5pY2Vjby5jb22CDSoucDJndWlkZS5jb22CDSoucGlv
dmFuby5jb22CDSoucHJvZW56YS5jb22CEioucmVudGFtaW5pYnVzLmNvbYILKi5z
ZWFsLnRlYW2CFCouc25ha2Vwcm9vZmdlYXIuY29tghUqLnRhcXVlcmlhbW9yZWxp
YS5jb22CGyoudHlnYXJ0cml2ZXJvdXRmaXR0ZXJzLmNvbYITKi51bm1jcmFkaW9s
b2d5Lm5ldIINKi53YXRjaGFuaS5tZYIRKi53ZWRkaW5ncy5jb20uc2eCCioud29t
ZW4uc2eCEioud3d3LWthYmVsbWFpbC5kZYILKi54aWxhci5jb22CFSoueWFyZGFy
bWJhcmdyaWxsLmNvbYIUYWN0aW9uYXVjdGlvbnNmbC5jb22CEWFsbWFhcmVmcWF0
YXIuY29tghFhbmRyb2lkdXJiYW5vLmNvbYITYXN0cm9saWdodHNvbGFyLmNvbYIL
YXVjdGlvbnMuc2eCCmF4aW91cy5jb22CCWJlaXphLmNvbYIKYmV0cmVpdC5kZYIT
YmxvY2tjaGFpbmJhbmNvLmNvbYIHYm5ldC5hbYIKYnJvbGFyLmNvbYILY2FsZW5k
YXIuc2eCDWNsYXNzaWZpZWQuc2eCDWNsc3Jrc3VzYS5jb22CEGNvZGVzd2lmdGJp
Yy5jb22CE2NvbGxhcHNpYmxlZ2Vhci5jb22CFWNvbXBhcmVzaWRlYnlzaWRlLmNv
bYIMY3FyZ3VydXMuY29tgglkZW50YWwuc2eCDWV4aGliaXRpb24uc2eCGGZpdG5l
c3Njb25uZWN0aW9udXNhLmNvbYIHZm9vZC5zZ4ILZ2Nvc3Rjby5jb22CFGdldGlu
dG91Y2h3aXRodXMuY29tggtncmFmaWtpLmNvbYINaGVhbHRoLmNvbS5zZ4IPaW50
ZXJuZXQuY29tLnNnggxqZXdlbGxlcnkuc2eCDWthbGFpZ25hci5jb22CC2thd2Fu
ZGUuY29tgglraW1pdGEuZGWCE21vbmV5Y2hhbmdlci5jb20uc2eCDW15dGhldGVz
YS5jb22CCm5yc29ydS5jb22CDm9yZ2FuaWNlY28uY29tggtwMmd1aWRlLmNvbYIL
cGlvdmFuby5jb22CC3Byb2VuemEuY29tghByZW50YW1pbmlidXMuY29tgglzZWFs
LnRlYW2CEnNuYWtlcHJvb2ZnZWFyLmNvbYITdGFxdWVyaWFtb3JlbGlhLmNvbYIZ
dHlnYXJ0cml2ZXJvdXRmaXR0ZXJzLmNvbYIRdW5tY3JhZGlvbG9neS5uZXSCC3dh
dGNoYW5pLm1lgg93ZWRkaW5ncy5jb20uc2eCCHdvbWVuLnNnghB3d3cta2FiZWxt
YWlsLmRlggl4aWxhci5jb22CE3lhcmRhcm1iYXJncmlsbC5jb20wEwYDVR0gBAww
CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC3Pvsk35xNunXy
OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYlwhU3IAAAEAwBHMEUCIQCiTqWtoCj8
QmibyYX1lb5w5dZtS0rA4neR0/hMxQ5ItAIgev4BHutOkeF1gcqzAOF72btXWUIp
V6FDeMkqz7xwEV0AdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAA
AYlwhU3iAAAEAwBHMEUCIHYdg1qTrfwSSoiR9BxRhoB82kXzzcagXRgVmgkIagNX
AiEAqo9JsaQLsMIMinB8H4hLLs91wd7xLWpAK8FB0urQ1WQwDQYJKoZIhvcNAQEL
BQADggEBALDBv7tyaS8b0wmEJT0Hi9j83kG+drpRCe1EVVozFocxKv+K5yMFTdWd
eB+5RTgznlEJEU7OAbFV9hdbzzW0SxKSG8rLX94D3T33HuxOZuK+pwJQu0YGn07r
Bsz/umU0meIMDXUI5Hd2hPu62Phnr3LhTP9FPL/Ty6UAJRlOBujRvAQqeCW4nEqx
2ZTprmpLa8vPXsoA6IgCTVKWeqozgFsbAS5ILlpsKonm7ELNlJZ9ZHRySrJt28YZ
dt6d6EWUiuJZCj954l+KQAL7FaTGLwHhFI636U72eExMYbAXVc0sCXJGoNVCOg0g
SVzLsvzCjjygl8OchMUOyWe6LDcYLkc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347362024890385438024118663465241735071888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 22:38:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 22:38:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jewellery.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654064901541293906325382648371842768013164045439830972716954572247915815202143084468392174501712258001144593027225453442218137707552118552192442733742162172040796986048409218587766347353277089532437275383614223249577168092528776681051164565293532237026312771391039682509930062395232281602023035414564471081954986218750950439003715602372422066994357834397141538469721241781659907663483721730320284066315741435059074054419851027002406890022556647044975883069025748945281933194054914017211700425563753953843441592781499774123547590306704721307970467551115270752875701010128219955743812288554968099877633437055284492017605297825121851462622445112096168888899830692515658075175758983611723186147164455830643513050614804536059207465600949488642631227689185750430434621957716633187899344629652288506810460907706208474217215803075025706107989210629808288975258609463878029880496855398274790228106181342022600206352542859806027761921616526204803345049161359288199258197341728028591642577026036226266377661998515771898956006243672381590208600507775887376107011664260488815542261300645601422591343449938560164548047425341913898897078685551306656249115921460544774694088325638168144261625560369120396166481258331615075121542905213754224349192363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b7ec2824c0ab875347a4216e10f3e783117fa19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actionauctionsfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.androidurbano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betreit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codeswiftbic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrsoru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p2guide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentaminibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seal.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taqueriamorelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tygartriveroutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-kabelmail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yardarmbargrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionauctionsfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androidurbano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betreit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeswiftbic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrsoru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2guide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentaminibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seal.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqueriamorelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tygartriveroutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-kabelmail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardarmbargrill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018970854dc80000040300473045022100a24ea5ada028fc42689bc985f595be70e5d66d4b4ac0e27791d3f84cc50e48b402207afe011eeb4e91e17581cab300e17bd9bb5759422957a14378c92acfbc70115d0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018970854de200000403004730450220761d835a93adfc124a8891f41c5186807cda45f3cdc6a05d18159a09086a0357022100aa8f49b1a40bb0c20c8a707c1f884b2ecf75c1def12d6a402bc141d2ead0d564
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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