jewellery.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:de:cc:2d:73:9d:5c:cc:7a:04:63:26:9d:85:e7:f0:3a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jewellery.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:de:cc:2d:73:9d:5c:cc:7a:04:63:26:9d:85:e7:f0:3a
Serial Number (int): 406593294869092289990686651705979400876090
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:9f:ee:e9:65:c3:60:0a:50:10:06:bc:86:c4:eb:f1:04:1e:48:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:c9:e4:7c:33:02:ec:9a:5a:d5:e7:7d:e8:6d:6b:a9:3f:00:76:e1
Fingerprint (sha256): 69:e1:f8:c7:75:f5:dd:e3:d4:13:bf:16:7c:9f:30:2c:61:4c:ce:45:7a:2b:af:dc:5d:d3:50:2c:bc:24:a8:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jewellery.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jewellery.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.astrolightsolar.com
*.auction.sg
*.auctions.sg
*.bnet.am
*.calendar.com.sg
*.calendar.sg
*.christmas.sg
*.classified.sg
*.courier.com.sg
*.cqrgurus.com
*.cruise.com.sg
*.cumpusa.com
*.dental.sg
*.exhibition.sg
*.flowers.com.sg
*.food.sg
*.forum.sg
*.friendshipvein.top
*.furniture-gallery-usa.com
*.gcostco.com
*.gubitosa.com
*.health.com.sg
*.hr.sg
*.internet.com.sg
*.ivanclothing.shop
*.jewellery.sg
*.kimita.de
*.loans.sg
*.marcusclothing.shop
*.meyersbaby.shop
*.michikopianoblog.com
*.moneychanger.com.sg
*.moneychanger.sg
*.nycconcertguide.com
*.poem.com.sg
*.privatemovies.cc
*.realty.sg
*.restaurant.sg
*.soccer.com.sg
*.sport.sg
*.startpretending.com
*.storage.com.sg
*.store.com.sg
*.susanhome.shop
*.ticketing.sg
*.transport.sg
*.trondice.org
*.vibaza.com
*.weddings.com.sg
*.women.sg
astrolightsolar.com
auction.sg
auctions.sg
bnet.am
calendar.com.sg
calendar.sg
christmas.sg
classified.sg
courier.com.sg
cqrgurus.com
cruise.com.sg
cumpusa.com
dental.sg
exhibition.sg
flowers.com.sg
food.sg
forum.sg
friendshipvein.top
furniture-gallery-usa.com
gcostco.com
gubitosa.com
health.com.sg
hr.sg
internet.com.sg
ivanclothing.shop
jewellery.sg
kimita.de
loans.sg
marcusclothing.shop
meyersbaby.shop
michikopianoblog.com
moneychanger.com.sg
moneychanger.sg
nycconcertguide.com
poem.com.sg
privatemovies.cc
realty.sg
restaurant.sg
soccer.com.sg
sport.sg
startpretending.com
storage.com.sg
store.com.sg
susanhome.shop
ticketing.sg
transport.sg
trondice.org
vibaza.com
weddings.com.sg
women.sg

Other certificates including the domain name jewellery.sg

(limited to 100 certificates)
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
laundry.com.sg

Certificate

The complete raw certificate details for jewellery.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406593294869092289990686651705979400876090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 21:55:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 21:55:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jewellery.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799558648108256614197287829225112540750232106030049826164635085400704317499211774766933255668983516565332273192509392500629220910738420466980507865376905101436631867001206890434470509351491805571908361664394500216456416264805520526444934329209173952607313920877309516039442696619502267544500668524851038712613991678059053869205820462246582697434579137625210815511124514600215299487877476619063481654211696893053992902868733477100098896813626384938469168340670401188994835670326371309531412119899894942440954205647656734451850558842667332243114158222401187863187829151151744613051001209071231469793022969811879865741918063474496385910501851288707530573079772048464784817675985243306853456553894623397733336435681122503304809535307280796306627268621344130518498318827035998980765914465747673791655535508514823453941135454709251443550410468981245659877159490879835854981232126306230036902978511483419954898330848486195143249379324718994978668533494166610041391518584763386024220170346433968512112307181055541548573648349532586201768281427627258831358262481639343453642676407306681015890156481163366692126866256407699392497640991590718169946783563786182182564946838708503955159363693870548022941960152148525404288346001570670155812331049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a49feee965c3600a501006bc86c4ebf1041e48da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendar.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christmas.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumpusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forum.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendshipvein.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture-gallery-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivanclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loans.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcusclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyersbaby.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michikopianoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nycconcertguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatemovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccer.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpretending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susanhome.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketing.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trondice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmas.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumpusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendshipvein.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture-gallery-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcusclothing.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyersbaby.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michikopianoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycconcertguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatemovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccer.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpretending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susanhome.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trondice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0f561ff900000403004730450220666c3832c5ac4836e6545ee4bf4aebad4a7c3061af7a4b54971726bdd7ffb7f7022100a6cc7e3ac67615d6ce0058e45b53989e3db40de9a854d20b3dc4c47b937ebb17007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0f562007000004030047304502203816500cbc6912320aecdf85b35be8ad8b5bbb1698e5e7300252a571c4080363022100bc4422c54ea569a84f2d86e9e7a75f4f53c88a95be52097b0077386cb7cc00de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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