shop.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:25:d6:2d:60:0a:06:f8:9e:f7:ef:a7:ed:4b:5d:de:df:da was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shop.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:d6:2d:60:0a:06:f8:9e:f7:ef:a7:ed:4b:5d:de:df:da
Serial Number (int): 274211995763717830202133973250941789331418
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:d6:a9:df:5a:d8:b1:7f:31:bb:64:9f:d5:ab:81:9c:f9:08:a2:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:fc:ad:0d:39:d3:24:b1:3a:d7:76:a5:9f:fd:b9:32:b3:87:1b:78
Fingerprint (sha256): 69:5c:85:8b:52:e8:a4:b0:74:c1:3a:14:d4:c7:9d:6f:2c:8d:9c:c9:e3:71:bc:c5:b3:7f:dc:81:ba:42:4e:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrotoxico.com
*.aimar.com
*.all-vpn.fr
*.aranciarossa.com
*.artesano.com
*.avodessa.com
*.cargurtus.com
*.classifiedad.com.sg
*.decolaar.com
*.dreamcatcherbluegrass.com
*.ebtedgr.com
*.ecletico.com
*.finance.sg
*.forum.com.sg
*.freelogomakr.com
*.holiday.sg
*.job.com.sg
*.kachin.com
*.kaksus.com
*.kiitco.com
*.lastimosa.com
*.lesgrandscrus.com
*.liuzmo.com
*.luchino.com
*.luckydraw.sg
*.lumosa.com
*.macrocar.com
*.metissa.com
*.nicksfightclub.com
*.nintendoshop.com
*.noolhar.com
*.ordenadoressobremesa.com
*.praino.com
*.radio.sg
*.rockstarpornstar.com
*.sedico.com
*.shop.sg
*.solipsus.com
*.ssp36.cc
*.stwartcalculus.com
*.tour.com.sg
*.tour.sg
*.tours.sg
*.trabajodecasa.com
*.tutor.sg
*.valentine.sg
*.villachessa.com
*.wilhelmus.com
*.wwwcasmexico.com
*.youziclouds.com
agrotoxico.com
aimar.com
all-vpn.fr
aranciarossa.com
artesano.com
avodessa.com
cargurtus.com
classifiedad.com.sg
decolaar.com
dreamcatcherbluegrass.com
ebtedgr.com
ecletico.com
finance.sg
forum.com.sg
freelogomakr.com
holiday.sg
job.com.sg
kachin.com
kaksus.com
kiitco.com
lastimosa.com
lesgrandscrus.com
liuzmo.com
luchino.com
luckydraw.sg
lumosa.com
macrocar.com
metissa.com
nicksfightclub.com
nintendoshop.com
noolhar.com
ordenadoressobremesa.com
praino.com
radio.sg
rockstarpornstar.com
sedico.com
shop.sg
solipsus.com
ssp36.cc
stwartcalculus.com
tour.com.sg
tour.sg
tours.sg
trabajodecasa.com
tutor.sg
valentine.sg
villachessa.com
wilhelmus.com
wwwcasmexico.com
youziclouds.com

Other certificates including the domain name shop.sg

(limited to 100 certificates)
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg

Certificate

The complete raw certificate details for shop.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274211995763717830202133973250941789331418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 22:01:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 22:01:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751272604858929978823119293124061824979026462306302622169792903502364527866118915935954988771758413196984966996795916960433385330345848672249488754208923539781588232201749279328392688765045104835424433046999439790194771582449955922194218427130404436992319526146263598341130643423668128568834099563280744055930756002600938595059586625300426401637875937480526785240866410076955756919374528516672687448679768399869079677593331046101843069695778427571557775303123105622052671070667249056445693306211824629266737080242992867338761714955317794194419851315373769523907056237954359682790179213535568744149587092640052424964521318675304315903928057918238358926786822622309671555758272376452275918266145959050407280938429475105240932785487270572671590554377157491178576961095689486359129327811581245389032347243902344774672173636831756150613044511479412845501961854434709552064215137820494606796205654238335518081648953233913567568839979950283440013498188417369384657174790440039936211422028840657610178411942406710953734360825811469655726496107197022449639170221140369531176233930449411744525030676720893576301013294643233854287912477119553012546548672619447616042400018512185330434581669375372927151523846680150174826755671995040647413630929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ed6a9df5ad8b17f31bb649fd5ab819cf908a287
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all-vpn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cargurtus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classifiedad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamcatcherbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebtedgr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finance.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forum.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelogomakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiday.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.job.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiitco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckydraw.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nintendoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockstarpornstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stwartcalculus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tour.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tour.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tours.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutor.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valentine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilhelmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcasmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youziclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all-vpn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargurtus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifiedad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamcatcherbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebtedgr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelogomakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiday.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiitco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckydraw.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nintendoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockstarpornstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwartcalculus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tour.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tour.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tours.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutor.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilhelmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcasmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youziclouds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4459a7dc000004030047304502207aa6194ea5065a6ec727996152c590b7c127fb199efa2e2b25de93099a9244a5022100be7c897e4fda44c8cafe8afe8c19b437a5160fbe00e1933932c5a16246f2385200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4459a84900000403004830460221008df12b189384984e73da49d69e22b92aa47421e4da875a3480b475ee5a8174ef022100a55c8b86519f9d540346d4fbca76f2bc8307bc20b11ef06c7e1f1ccee29e8b38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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