jewellery.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:cf:fe:bf:5a:f5:8a:b2:b0:01:62:9e:38:cb:88:bd:50:f6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jewellery.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cf:fe:bf:5a:f5:8a:b2:b0:01:62:9e:38:cb:88:bd:50:f6
Serial Number (int): 332113925232415039756543250362072223797494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:e7:34:cb:a4:25:83:46:6d:51:20:83:d6:79:ee:07:15:74:33:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:98:79:05:aa:dc:69:1e:71:90:fb:f2:cb:cb:29:16:1f:2c:84:c4
Fingerprint (sha256): 3d:49:d4:12:ce:58:ed:f9:3c:a1:e0:64:56:b5:66:85:38:ed:16:ed:ea:d8:8e:7e:4a:f7:12:5c:0e:93:95:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jewellery.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jewellery.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.argo-leipzig.de
*.atlassrr.com
*.bsc-pfaffenwinkel-shop.de
*.buliva.com
*.carbonweltsportwagen.de
*.classified.sg
*.cloudtranscription.com.au
*.connectoncam.com
*.creativekidsstuff.com
*.cybersecuritycourses.com.au
*.dental.sg
*.encourager-stiftung.de
*.food.sg
*.games-outlet.de
*.hainanairlines.cm
*.health.com.sg
*.internet.com.sg
*.jetpunkt.de
*.jewellery.sg
*.kellerkompanie.de
*.kindergards-gratistesten.de
*.lederarmband.com
*.llebad24.de
*.lochkreisdatenpunkt.de
*.loehrke-versicherungen.de
*.longweld.de
*.markssandspencer.com
*.medienkurse-eltern.de
*.mehrgenerationen-wohnen-minden.de
*.mindtoools.com
*.moneychanger.com.sg
*.naehwelt-schweizer.de
*.nuenning-schallenberg.de
*.permeable.com.au
*.protectbed.com
*.rdle.de
*.reisart-business.de
*.roadsandrivers.de
*.romancescaimbater.de
*.schutzenkreis-luebbecke.de
*.tnccedu.com
*.trume-realisieren.de
*.turbosound-app.de
*.volkdbank-bi-gt.de
*.weddings.com.sg
*.women.sg
*.xn--wickipdia-02a.de
*.xn--zaubertheater-lbeck-kbc.de
*.xschischs.de
*.zar-muelheim.de
argo-leipzig.de
atlassrr.com
bsc-pfaffenwinkel-shop.de
buliva.com
carbonweltsportwagen.de
classified.sg
cloudtranscription.com.au
connectoncam.com
creativekidsstuff.com
cybersecuritycourses.com.au
dental.sg
encourager-stiftung.de
food.sg
games-outlet.de
hainanairlines.cm
health.com.sg
internet.com.sg
jetpunkt.de
jewellery.sg
kellerkompanie.de
kindergards-gratistesten.de
lederarmband.com
llebad24.de
lochkreisdatenpunkt.de
loehrke-versicherungen.de
longweld.de
markssandspencer.com
medienkurse-eltern.de
mehrgenerationen-wohnen-minden.de
mindtoools.com
moneychanger.com.sg
naehwelt-schweizer.de
nuenning-schallenberg.de
permeable.com.au
protectbed.com
rdle.de
reisart-business.de
roadsandrivers.de
romancescaimbater.de
schutzenkreis-luebbecke.de
tnccedu.com
trume-realisieren.de
turbosound-app.de
volkdbank-bi-gt.de
weddings.com.sg
women.sg
xn--wickipdia-02a.de
xn--zaubertheater-lbeck-kbc.de
xschischs.de
zar-muelheim.de

Other certificates including the domain name jewellery.sg

(limited to 100 certificates)
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
laundry.com.sg

Certificate

The complete raw certificate details for jewellery.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332113925232415039756543250362072223797494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:57:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:57:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jewellery.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816454603147324808648396597915040933933667867296995164723759747682673151529610041820829671372905848173006978043481634909759464324295016781087952802115039718414551771502146760852313103478461263363060924604354390211521856591693752020176660389760820453027640242481749059513719736063486589976710507397659414670883468651612907770613450224738658774626841294657180776560572169486893170232930656764761488314430732983923300187645223379435048909665384734663720879902617862001715053674391674460197861041948160484554799885068861787904415251649651766173367705390362320464393563829124428617759213825348958042168036819174718562696228431923603158011232158275503586228511107127628026798054670719177179208692348608211604856804366849286079413844426456234309186665857652275980819462953755608495969340961577053377664721486748922137445279345417059935068909908392475277466419189956222920988079214717754296768300344622488919778683527782595189423327923393128312113032668598126563501627153690795727968770973828839528619322274753086152159999268170124871009339246182731721687434438580834902221416559961889068817164623101276400199296042439162235389366254479996035865285701435705191245354890761101310992204561937308962847913427994528426618987238535062405137163161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6be734cba42583466d512083d679ee0715743375
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argo-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlassrr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsc-pfaffenwinkel-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buliva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonweltsportwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudtranscription.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectoncam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativekidsstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybersecuritycourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encourager-stiftung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.games-outlet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hainanairlines.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetpunkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellerkompanie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindergards-gratistesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lederarmband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llebad24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lochkreisdatenpunkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loehrke-versicherungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longweld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markssandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medienkurse-eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mehrgenerationen-wohnen-minden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindtoools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naehwelt-schweizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuenning-schallenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.permeable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protectbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rdle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reisart-business.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadsandrivers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romancescaimbater.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schutzenkreis-luebbecke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnccedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trume-realisieren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbosound-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volkdbank-bi-gt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wickipdia-02a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zaubertheater-lbeck-kbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xschischs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zar-muelheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argo-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlassrr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsc-pfaffenwinkel-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buliva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonweltsportwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudtranscription.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectoncam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativekidsstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecuritycourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encourager-stiftung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games-outlet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hainanairlines.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetpunkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellerkompanie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindergards-gratistesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lederarmband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llebad24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lochkreisdatenpunkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loehrke-versicherungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longweld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markssandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medienkurse-eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehrgenerationen-wohnen-minden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindtoools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naehwelt-schweizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuenning-schallenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permeable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisart-business.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadsandrivers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romancescaimbater.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schutzenkreis-luebbecke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnccedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trume-realisieren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbosound-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkdbank-bi-gt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wickipdia-02a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zaubertheater-lbeck-kbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xschischs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zar-muelheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f798a8b010000040300483046022100ed3b2559b3dc835e86a294b0ebe1acf1fda3630a83c96e516cf6bb480e7fbb13022100b6bf3bdca30caa52af891e848829b0961a36f6690f1dc28c9ed5341dcef23cdd007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f798a8ac700000403004730450221008f58f9422d86b05211dbfddfdeeeef476e4cdf3a48b390a96daf14cf5290274802205f7b7c0808ddc3bd4cc86797fc268cd7f63e8b1e1000940b95fdadbbbaf5aad8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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