shop.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:8c:e0:f9:58:79:6a:ab:53:72:06:76:28:aa:1a:d6:be:6f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shop.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:e0:f9:58:79:6a:ab:53:72:06:76:28:aa:1a:d6:be:6f
Serial Number (int): 396387716843417633115967011267623584710255
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 12:d4:05:c0:81:d7:f1:91:ff:b1:cd:f6:e9:53:54:7f:f2:64:83:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:6a:5c:14:af:40:e6:4e:49:83:1c:f1:81:a5:f7:b5:10:a7:7a:78
Fingerprint (sha256): bd:45:19:21:09:19:91:65:6e:b7:9a:e6:e6:05:23:85:ac:7f:92:57:65:c7:b5:b6:3e:dd:3a:67:67:20:37:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.autogenous.com
*.ayuza.com
*.bltzer.de
*.bomcelular.com
*.bumbino.com
*.casjnetusa.com
*.classifiedads.com.sg
*.cloudbank.com.au
*.consultorinformatico.com
*.degreeinoneyear.com
*.discountregistrar.com
*.email.sg
*.escaleno.com
*.etraade.com
*.everyplare.com
*.ferrarusa.com
*.followerssup.com
*.gevemecoin.net
*.gioiosa.com
*.globcar.com
*.goheslthuc.com
*.guide.sg
*.handphones.sg
*.hosting.com.sg
*.intolerancialactosa.com
*.itcareers.com.au
*.janivcn.com
*.kieico.com
*.ladroguerie-eco.com
*.letsgetgirls.club
*.lionsgate-ent.com
*.maiyeu.com
*.maternity.sg
*.men.sg
*.mpt.in
*.muuza.com
*.news.sg
*.ntu.com.sg
*.papelecologico.com
*.paycheckus.com
*.plexusworlwide.com
*.poll.sg
*.potosino.com
*.satnetpenasco.com
*.shop.sg
*.toolbar.com
*.toys.sg
*.webmail.sg
*.yts.gd
*.ziocar.com
autogenous.com
ayuza.com
bltzer.de
bomcelular.com
bumbino.com
casjnetusa.com
classifiedads.com.sg
cloudbank.com.au
consultorinformatico.com
degreeinoneyear.com
discountregistrar.com
email.sg
escaleno.com
etraade.com
everyplare.com
ferrarusa.com
followerssup.com
gevemecoin.net
gioiosa.com
globcar.com
goheslthuc.com
guide.sg
handphones.sg
hosting.com.sg
intolerancialactosa.com
itcareers.com.au
janivcn.com
kieico.com
ladroguerie-eco.com
letsgetgirls.club
lionsgate-ent.com
maiyeu.com
maternity.sg
men.sg
mpt.in
muuza.com
news.sg
ntu.com.sg
papelecologico.com
paycheckus.com
plexusworlwide.com
poll.sg
potosino.com
satnetpenasco.com
shop.sg
toolbar.com
toys.sg
webmail.sg
yts.gd
ziocar.com

Other certificates including the domain name shop.sg

(limited to 100 certificates)
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg
shop.sg

Certificate

The complete raw certificate details for shop.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396387716843417633115967011267623584710255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 22:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:43:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837930230573542603080814183019576464962507776902915766254226630084668223045475048601521825750932649554333191322828199828341247474543923366609248568015096853639363314004960465208465789541525580591618404948803246296465799884454247896713042128768579207068372652780238631658613787235263967825849174575607764233106509558423572177823528896362929396617169945076832014440559089471569066449921390783717426303416496123370225100665813319781510145874334840739901913241477181635706483389011454369723244051459769349983917230346052752353257634059639148425085831748176259380608783133025707964057491716704542581540371131544055651871941367266399183303426894769790133750945497968978599008572109729062312792000596885223903209368315365314334646451057130868140761160713351833796733321669154194986160583684682252855611060233238180739164003495882979044160709770951017882566275124259419598760293725586148307428171900804916066677218971615674762838735954565133908546204710622340949379858362982285742942287770867902889129897998180203226704172430439693344296748660186637492339786077999485400677409992922692026048681757842712354629881989248113746006631891899824726774490360426199482731802891235804976239511023423416747842345619866452992019295765988621971249001631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12d405c081d7f191ffb1cdf6e953547ff26483f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autogenous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bltzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bomcelular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bumbino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casjnetusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classifiedads.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudbank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consultorinformatico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.degreeinoneyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discountregistrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escaleno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etraade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyplare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferrarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.followerssup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gevemecoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioiosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goheslthuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guide.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handphones.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intolerancialactosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itcareers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janivcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kieico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladroguerie-eco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.letsgetgirls.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionsgate-ent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maiyeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maternity.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.men.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntu.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papelecologico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paycheckus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plexusworlwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poll.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potosino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satnetpenasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toolbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toys.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmail.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yts.gd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autogenous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bltzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomcelular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumbino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casjnetusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifiedads.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudbank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultorinformatico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degreeinoneyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountregistrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaleno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etraade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyplare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'followerssup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevemecoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioiosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goheslthuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handphones.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intolerancialactosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcareers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janivcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kieico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladroguerie-eco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgetgirls.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionsgate-ent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maiyeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maternity.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'men.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntu.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papelecologico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycheckus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plexusworlwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poll.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potosino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satnetpenasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toys.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yts.gd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziocar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa5877725000004030047304502203c91ff013dabf279dd6d93e3266a6bc2e49ede326f65f081493fa963fa0e7723022100e25a725e7817386d5da5ffe1181839891203b8828bcc2e65e93f950488ee8b06007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa58777240000040300473045022067620dc409c95e0c39a1ee85ac90a2cfb85f19f19abb3dba3aee519551e0ddc0022100ad4494cd350eed423eed93b49b5757252dc97ef2cbb7410f1f1f328b454d3afe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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