holiday.com.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:e3:7a:51:4e:f6:f7:87:a7:a4:6a:57:19:54:08:8f:b8:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=holiday.com.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e3:7a:51:4e:f6:f7:87:a7:a4:6a:57:19:54:08:8f:b8:fc
Serial Number (int): 425855829011220002707632780939968742668540
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:06:c9:87:7a:2f:aa:71:e3:b4:b2:41:88:72:ff:9f:3a:fb:97:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:e8:85:7f:fe:4c:15:f3:d0:fe:29:eb:84:70:1e:2c:ae:61:32:49
Fingerprint (sha256): 6a:5f:81:83:5c:cd:63:e3:5b:67:0c:9a:80:a0:71:47:f8:ef:fa:c6:4b:a9:a3:ec:8f:7d:11:26:f6:1d:af:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holiday.com.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holiday.com.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.art.com.sg
*.auction.com.sg
*.baby.sg
*.brides.sg
*.career.sg
*.catalina.es
*.church.sg
*.cinema.sg
*.coffee.sg
*.condoms.sg
*.courier.sg
*.cuisine.sg
*.dating.sg
*.eyewear.sg
*.fdx.au
*.florists.sg
*.forums.sg
*.funeral.com.sg
*.furniture.sg
*.grocery.sg
*.healthfood.sg
*.hilianquan.com
*.holiday.com.sg
*.hongshi.com
*.hostel.sg
*.hosting.sg
*.jeeun.com
*.job.sg
*.library.com.sg
*.licnioglasisrbija.com
*.lingerie.com.sg
*.lingerie.sg
*.livley.com
*.maid.com.sg
*.movies.com.sg
*.nursery.sg
*.office.sg
*.orchardroad.com.sg
*.orlandohealth.co
*.party.sg
*.perfectpizzas.com
*.pickboxer.com.au
*.poese.com
*.registrar.sg
*.supercarro.com
*.traffic.com.sg
*.tuition.com.sg
*.vacations.com.sg
*.whichphysiotherapist.com.au
*.wine.com.sg
art.com.sg
auction.com.sg
baby.sg
brides.sg
career.sg
catalina.es
church.sg
cinema.sg
coffee.sg
condoms.sg
courier.sg
cuisine.sg
dating.sg
eyewear.sg
fdx.au
florists.sg
forums.sg
funeral.com.sg
furniture.sg
grocery.sg
healthfood.sg
hilianquan.com
holiday.com.sg
hongshi.com
hostel.sg
hosting.sg
jeeun.com
job.sg
library.com.sg
licnioglasisrbija.com
lingerie.com.sg
lingerie.sg
livley.com
maid.com.sg
movies.com.sg
nursery.sg
office.sg
orchardroad.com.sg
orlandohealth.co
party.sg
perfectpizzas.com
pickboxer.com.au
poese.com
registrar.sg
supercarro.com
traffic.com.sg
tuition.com.sg
vacations.com.sg
whichphysiotherapist.com.au
wine.com.sg

Other certificates including the domain name holiday.com.sg

(limited to 100 certificates)
azhome.site
4wbvl.us
holiday.com.sg
holiday.com.sg
holiday.com.sg
banphe.com
holiday.com.sg
coahcoutlet.com
hotelflat.com

Certificate

The complete raw certificate details for holiday.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425855829011220002707632780939968742668540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 12:29:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 12:29:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holiday.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711140961828105832460361539951657045660916880656584633358690805031749744397311217843385174622994768216069715029698110785332799467914504482872355275491206234334249227161083129016362555803512314036199411165276231894363514699308506246375437242553545284465157281289560354606833034617149794257235068136474083419900739234081765021030315074555754196319768027284590479055318978035480157294940082937283663425764762066950090669161815786310003001699245767852525261996216597694568604668556194870202747649811111933437595827735817369447728582758703022741966193292739670091619309252805747947909415674493117108395485246868919084471808960477886684252739895118302883005685452168192368472990849144337858608360500481106276456582283398576019936664020744730579222813052135911085419113305340677598720125435069687918150620579778638588461558557992133270489778324539846340024538655182815931714826407735328986002976167151787365908301397407228020734448234581014050012885971289804792058667252725251489227677748986513814942910776812671035938051327957859385876390416104168515727340295865720908151718759209154997380250423781243254978094961151586398994906449546976371099107403478508593704957063629767289635925400305972691494435585046452310619388631520199082034177159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3506c9877a2faa71e3b4b2418872ff9f3afb97dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilianquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilianquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6cfe94c80000040300473045022071ca7a60fa54f9b3961f008a93a501d492126e7f7efce0929093843215a979c3022100b5de39fc2b65b806201978ed773dc777cc1a20d3439a44be29d33472b04a0bb500770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6cfe95200000040300483046022100d453f6d18e84e3267e823acd2c555906396b2c7916070b2d54841f1ad681b480022100d9c55e1e183298dcc2e8d92b2aa5e8e226f1580d8c5aadd620716d5b8b2a0479
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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