hr.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:67:fa:b5:be:76:1f:65:ab:02:64:a5:65:a3:ef:0c:2e:8e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hr.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:fa:b5:be:76:1f:65:ab:02:64:a5:65:a3:ef:0c:2e:8e
Serial Number (int): 383831478187591736910131527894587958636174
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:86:1f:61:fe:07:ba:68:84:0d:5b:da:7f:52:ab:6a:37:7e:3f:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:07:33:ae:a8:9e:91:7e:5e:98:38:22:a1:98:e7:64:54:56:6f:ed
Fingerprint (sha256): b8:60:25:4b:43:8a:23:be:ce:00:6e:89:ba:0a:4d:ad:8a:e0:b3:c9:96:3f:5f:5c:60:2b:19:18:4c:9a:c8:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hr.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hr.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.actionauctionsfl.com
*.almaarefqatar.com
*.androidurbano.com
*.astrolightsolar.com
*.auctions.sg
*.axious.com
*.beiza.com
*.betreit.de
*.blockchainbanco.com
*.bnet.am
*.brolar.com
*.clsrksusa.com
*.codeswiftbic.com
*.collapsiblegear.com
*.comparesidebyside.com
*.courier.com.sg
*.cqrgurus.com
*.cruise.com.sg
*.exhibition.sg
*.fitnessconnectionusa.com
*.gcostco.com
*.getintouchwithus.com
*.grafiki.com
*.gubitosa.com
*.hr.sg
*.kalaignar.com
*.kawande.com
*.kimita.de
*.mythetesa.com
*.nrsoru.com
*.organiceco.com
*.piovano.com
*.poem.com.sg
*.proenza.com
*.realty.sg
*.rentaminibus.com
*.seal.team
*.snakeproofgear.com
*.storage.com.sg
*.store.com.sg
*.taqueriamorelia.com
*.transport.sg
*.tygartriveroutfitters.com
*.unmcradiology.net
*.watchani.me
*.weddings.com.sg
*.women.sg
*.www-kabelmail.de
*.xilar.com
*.yardarmbargrill.com
actionauctionsfl.com
almaarefqatar.com
androidurbano.com
astrolightsolar.com
auctions.sg
axious.com
beiza.com
betreit.de
blockchainbanco.com
bnet.am
brolar.com
clsrksusa.com
codeswiftbic.com
collapsiblegear.com
comparesidebyside.com
courier.com.sg
cqrgurus.com
cruise.com.sg
exhibition.sg
fitnessconnectionusa.com
gcostco.com
getintouchwithus.com
grafiki.com
gubitosa.com
hr.sg
kalaignar.com
kawande.com
kimita.de
mythetesa.com
nrsoru.com
organiceco.com
piovano.com
poem.com.sg
proenza.com
realty.sg
rentaminibus.com
seal.team
snakeproofgear.com
storage.com.sg
store.com.sg
taqueriamorelia.com
transport.sg
tygartriveroutfitters.com
unmcradiology.net
watchani.me
weddings.com.sg
women.sg
www-kabelmail.de
xilar.com
yardarmbargrill.com

Other certificates including the domain name hr.sg

(limited to 100 certificates)
hr.sg
hr.sg
arrowfence-br.com
arrowfence-br.com
jewellery.sg
jewellery.sg
hr.sg
courses.sg
hr.sg

Certificate

The complete raw certificate details for hr.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs78SGBGMySplhvQGWd0K
AUUymJjrHyZjWiP7BFfNzy4hYAIio/HDyzI9RdaE8rUOWALXE8/X9dLBYKCpkz3B
JLHWoaRprDRGn/52iMWNEFWHLlPNdGFg6PFS+BNFk7K62rDaoKSlCanYMzsYsCjz
85Oamfj6CnBs07ShWqe7flICIVDli6VFXw0SLkXlxj1m2Uv0fHe/yvRwQ7xdrwGm
fk/Pi/7AXkDu/aLEheNL6rgE8A7+Gu1drnpSr3mbfu/uW/y4z84l8XopA8FkSc6N
R85V1mEpDNNh6iA9IrsbRBJa4YaNCLZTHwEfSnpFa8z8pFgvJWd267x3eUHqZT9G
INvq/UhtoVj+Ux7j6xENPM6qzItfwdyLito+2wQ9PT9BZEaLcJCVamnue4s8AMyv
pfQvAtBxJh0v5N4WLzV92yGodMXPOVVmaoAmWTihPDapcwQEO1bTst7XnGul8DQ0
pOhX81wTTFx/w/bGUPkSUdNly7/57qM+suPTSt+9QS3KccUPAsZ7ecddEVMPyAV9
Zi9QGrReoWqWMCxg9nfQQbW4ZOVIsok9UYyesM4CPmQ8qWTUm7o/HhSxlwDc6P1T
kR5DFJar7twI0WRgZI/6PFi8e2k9m089qkrDlUU3F5sva7gwrbZcW/f2wCG8pQiy
9eLmX0X+MZjKe/pitnNTws8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383831478187591736910131527894587958636174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 22:40:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:40:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hr.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733301211477333982830738083060862943039322426644949446632407363877369351252225276802000036754793989800180589986534442687259289822262617372294727525119501048190956160137411213564488842452689493708878812942507302115844789307070584737070678835155509159825820318218191054893826350799280140975856718051068417169509771135166842105430724735752933136848944118893916153040097107371070205219779523080507423595974617852241587835198254155396567869742214632764053003570619253268147279354127341880442958222871232101864377641615737849072301642915509311880423029003273983595841418833236081061133952644494681734038175091373661762586742504125286002117368974698360560753471121752116826042437023753250744331797415526469674713819263137198690323225853525560719872495902569178491135714311087834896536049469904239397838063120509051769777513424097080220325328650210338437582940588856395125391605173580577489655769337748681116897716961790487637747361628539064760138889553945384985911000760328221159781513701957401107149323502144703991290110050320103215700583914914656642521809652248115988823828096639257801669166155410334735322073276503394201617079783491257450242631152026750594783277039666577441020447925008839273233113655826430572520089991416656109522633423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19861f61fe07ba68840d5bda7f52ab6a377e3f43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actionauctionsfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.androidurbano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betreit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codeswiftbic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrsoru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentaminibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seal.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taqueriamorelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tygartriveroutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-kabelmail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yardarmbargrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionauctionsfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androidurbano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrolightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betreit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnet.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeswiftbic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqrgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcostco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrsoru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentaminibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seal.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqueriamorelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tygartriveroutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-kabelmail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardarmbargrill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa58404b700000403004630440220490427df45d3b0f3633b43bd11655ff324c66db6395ade298c8792ac8614256302204c48205a22411aa649a242ac1519573ef499544886bac490efd3be33537cf289007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa58405580000040300483046022100ed7c39c4ab78fe7c34a1b323022414cc42bd98471a363d970f9ff5904cd0c30e022100bef9f5cf93115d08cfa4cbac1146c91ab838416cfa17658a23c9793833fb78ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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