crewventure.com

Issued by R3

About this certificate

This digital certificate with serial number 03:24:48:ef:2a:9f:bc:66:b5:56:f4:8d:1f:8b:64:21:61:4e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crewventure.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:48:ef:2a:9f:bc:66:b5:56:f4:8d:1f:8b:64:21:61:4e
Serial Number (int): 273683969243597016932976053485703947968846
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:5c:86:29:06:68:53:b6:d5:24:f4:bc:85:7d:84:4c:3f:c6:a6:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:1a:12:58:0c:5c:a9:e9:a7:32:c1:86:d4:5f:95:f0:08:ad:01:ca
Fingerprint (sha256): 86:ec:d0:f6:03:2d:fb:a2:07:f6:3c:0d:a4:3c:41:cb:8c:c3:23:8c:b5:e0:0e:b9:d6:e4:0b:9a:45:dd:8c:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crewventure.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crewventure.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1953.au
*.aahil.name
*.austinsurance.com
*.baby.sg
*.bahariya.com
*.brides.sg
*.cafe.com.sg
*.careersone.com
*.catalina.es
*.cinema.sg
*.crewventure.com
*.cuisine.sg
*.dnlogisticslimited.com
*.educaraunperro.com
*.everydolla.com
*.financereview.pro
*.florists.sg
*.forums.sg
*.furniture.sg
*.haldwani.com
*.hongshi.com
*.hqsm.com
*.iammai.com
*.icecream.sg
*.impartition.com
*.jeeun.com
*.job.sg
*.laurelee.com
*.licnioglasisrbija.com
*.lingerie.sg
*.livley.com
*.maid.com.sg
*.mcoinmarket.com
*.mesum.com
*.newtrafficserver.com
*.office.sg
*.orchardroad.com.sg
*.orlandohealth.co
*.perfectpizzas.com
*.poese.com
*.registrar.sg
*.renovable.com
*.revonation.com
*.supercarro.com
*.trakem.com
*.udjplayer.com
*.vacations.com.sg
*.whichspecialist.com.au
*.wine.com.sg
*.zorbing.com.au
1953.au
aahil.name
austinsurance.com
baby.sg
bahariya.com
brides.sg
cafe.com.sg
careersone.com
catalina.es
cinema.sg
crewventure.com
cuisine.sg
dnlogisticslimited.com
educaraunperro.com
everydolla.com
financereview.pro
florists.sg
forums.sg
furniture.sg
haldwani.com
hongshi.com
hqsm.com
iammai.com
icecream.sg
impartition.com
jeeun.com
job.sg
laurelee.com
licnioglasisrbija.com
lingerie.sg
livley.com
maid.com.sg
mcoinmarket.com
mesum.com
newtrafficserver.com
office.sg
orchardroad.com.sg
orlandohealth.co
perfectpizzas.com
poese.com
registrar.sg
renovable.com
revonation.com
supercarro.com
trakem.com
udjplayer.com
vacations.com.sg
whichspecialist.com.au
wine.com.sg
zorbing.com.au

Other certificates including the domain name crewventure.com

(limited to 100 certificates)
twinbitcoin.com
crewventure.com
crewventure.com
gige.us
crewventure.com
crewventure.com
mplayhd.com
crewventure.com
quadup.com
crewventure.com

Certificate

The complete raw certificate details for crewventure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273683969243597016932976053485703947968846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 11:29:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 11:29:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crewventure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721301972195203506939357856482920669842592458140859421968809921856174433700176171031697476770046031933872484902589375349266034999598078144510073989506808052426758469027946010521163363169578213714394187694968750521799177962773518536234413913056266581593311652475896102812970089422167361894820287697232543310438563141386398575478301119709761535028881790765362959103117530655050708205749011359111803871638398754468412092190940656197635864677592783600184249831076875598382544266978272309104517109715848413952277818035303306051436694324394276711274139121048513475248720439330955894000115476596097744386200137276857235635075975890160407410664250697231219324826761277584767231006824188692582414245421125136343493260478796398408482245071344308287380147492815300064240073326484723040415395469570320347362651261675378284781758297047185784364791158193393108682451861800577751264117323734711800841455206328195330739717082328894788498877845545571711951731360296692093275592647400198369545681111841378695932587207262699712498726985434060733459689502502551912297515375078166549903945292978927848184448422785782610796616394716437737971049450552720444736318455185535827777740790241415718808924277198959052223199765632880365189449069195037199120979963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							825c8629066853b6d524f4bc857d844c3fc6a6f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aahil.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahariya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafe.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crewventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnlogisticslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educaraunperro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financereview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haldwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iammai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icecream.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impartition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurelee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcoinmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtrafficserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trakem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udjplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zorbing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahil.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahariya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnlogisticslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educaraunperro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financereview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haldwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icecream.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impartition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurelee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcoinmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrafficserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trakem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udjplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zorbing.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e37c9ab4a00000403004730450220744757191cd394c03080d9e697821bd06776ce64f3cb11c35ff497f9868acc0f022100eb6f2622b12ac6dc38795c7d6e636375732b2704f5663e593dbf3149baabe642007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e37c9ab440000040300483046022100c56295bd2addbfb3897fabcb7a63f72db5ae6c76ce9f1dc805c8d5a1c09ac6b6022100dd6fc3283ab833ce85ff2271d6ae2d7488a7712e365fa5a9e619e58cc9d9939d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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