holiday.com.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:df:c4:a9:75:69:77:df:30:86:a0:b6:9c:ba:a7:4f:33:7e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=holiday.com.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:c4:a9:75:69:77:df:30:86:a0:b6:9c:ba:a7:4f:33:7e
Serial Number (int): 424593520117151179062813247979181633909630
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:2f:d5:00:20:54:c6:95:52:5a:18:fb:d3:6d:78:f7:75:22:61:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:96:83:97:42:84:bf:8f:53:52:47:49:f9:99:de:90:e7:33:a8:ed
Fingerprint (sha256): 77:38:09:d2:83:b7:dc:ed:3a:c1:f2:f6:a4:8a:56:5d:21:c8:93:5a:51:93:25:a6:a8:bb:5e:68:51:b6:4d:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holiday.com.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holiday.com.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.948.co.in
*.advantagesanddisadvantages.com
*.aggys.com
*.art.com.sg
*.auction.com.sg
*.braghini.com
*.broflo.com.au
*.car.com.sg
*.career.sg
*.cestare.com
*.cho-katsu.info
*.chomis.com
*.church.sg
*.coffee.sg
*.condoms.sg
*.courier.sg
*.dating.sg
*.eyewear.sg
*.fdx.au
*.funeral.com.sg
*.grocery.sg
*.grontkowskimonument.com
*.healthfood.sg
*.hilianquan.com
*.holiday.com.sg
*.hostel.sg
*.hosting.sg
*.kasbarian.com
*.kinglun.com
*.library.com.sg
*.lingerie.com.sg
*.loveme.co
*.luthe.com
*.maids.sg
*.movies.com.sg
*.nicific.com
*.nursery.sg
*.party.sg
*.pickboxer.com.au
*.scheells.com
*.shippingestimate.com
*.shirayukihime.com
*.smartpop.com
*.taobaol.com
*.traffic.com.sg
*.tuition.com.sg
*.vaycuoi.com
*.whichphysiotherapist.com.au
*.wwwduffyscatering.com
*.yellowstoneriver.com
948.co.in
advantagesanddisadvantages.com
aggys.com
art.com.sg
auction.com.sg
braghini.com
broflo.com.au
car.com.sg
career.sg
cestare.com
cho-katsu.info
chomis.com
church.sg
coffee.sg
condoms.sg
courier.sg
dating.sg
eyewear.sg
fdx.au
funeral.com.sg
grocery.sg
grontkowskimonument.com
healthfood.sg
hilianquan.com
holiday.com.sg
hostel.sg
hosting.sg
kasbarian.com
kinglun.com
library.com.sg
lingerie.com.sg
loveme.co
luthe.com
maids.sg
movies.com.sg
nicific.com
nursery.sg
party.sg
pickboxer.com.au
scheells.com
shippingestimate.com
shirayukihime.com
smartpop.com
taobaol.com
traffic.com.sg
tuition.com.sg
vaycuoi.com
whichphysiotherapist.com.au
wwwduffyscatering.com
yellowstoneriver.com

Other certificates including the domain name holiday.com.sg

(limited to 100 certificates)
azhome.site
4wbvl.us
holiday.com.sg
holiday.com.sg
holiday.com.sg
banphe.com
holiday.com.sg
coahcoutlet.com
hotelflat.com

Certificate

The complete raw certificate details for holiday.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424593520117151179062813247979181633909630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 11:26:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 11:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holiday.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918757245537888444369528017369592181086583818259569633074792695138993612824112735204100890842550219637807188695879787167458230643074110769328969269166461695766627483155213984304806752542878638169078657405283327335771588775135328670486687361444856651148928219071126009921733513529950240697289327720704273956806117194885816798054374331842426723410705231154348158345643300306641648707578731882866036434417673291459851293084126649341943919106065166223429682087577752220023466998086429165666581052238921053584411572753726179665612829867693040782741824681780869759656786511565751435934051658035971911469836615414979656482260781889279060769158919956698742375021908665887874002277867455991122775367711295916563743429656895881136334841128735713832005510160975467670153791192795424313683792105820731172814331336405648083136524284017208517271282534852692817386699374244133414293983076134280002583844169187413087979383211929967496887769832821495614885252326976246398003435483972572148332235588119776698732807514911400626441271251311281938807490836967859035069456270386239181031125167959400415316574024169788174062532765529408456904016337290783619769374611435836617593273730603136845088572617424195129824033088665541182617304186334088841097495039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12fd5002054c695525a18fbd36d78f7752261ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advantagesanddisadvantages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broflo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cho-katsu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilianquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kasbarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luthe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maids.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwduffyscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowstoneriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagesanddisadvantages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broflo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho-katsu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilianquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasbarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luthe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maids.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwduffyscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowstoneriver.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d02c9dbff0000040300473045022100cafb15e7dc1f9d381096420a6011a96c7eddf50d0e29031b84144aa3431b2d2b02206117b7bf6bf4efa42115c15ebcffaf2f8164001b780be6c40da0dad88a0595c900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d02c9dc560000040300463044022046bb7b9325584921444f4c422885e9339577079e93c36643e6a8ac33267fdb2f0220752b9e2536f0d19b1316586544f2fb9234925ea6e08d15b06ebe9dfa67bde261
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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