holiday.com.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:3b:aa:58:0c:58:87:39:f9:88:25:38:8e:f5:98:d3:42:5c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=holiday.com.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:aa:58:0c:58:87:39:f9:88:25:38:8e:f5:98:d3:42:5c
Serial Number (int): 368752229307186186802613257625599028183644
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:66:5e:52:9b:94:0b:bd:69:cd:ea:32:df:57:85:e4:76:bd:7b:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:b1:2a:ad:08:7b:ff:42:bb:ef:98:c9:a3:ef:c9:ae:b7:4b:d0:da
Fingerprint (sha256): cd:36:9a:46:14:ff:bc:d9:af:a4:6f:e1:35:40:46:2c:83:c4:f0:00:59:c0:24:dc:46:6f:02:11:7b:92:62:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holiday.com.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holiday.com.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abille.com
*.art.com.sg
*.auction.com.sg
*.bible.sg
*.brisneyland.com
*.career.sg
*.cho-katsu.info
*.church.sg
*.coffee.sg
*.compostableproduct.com
*.condoms.sg
*.courier.sg
*.dating.sg
*.eyewear.sg
*.fdx.au
*.forextradecourse.us
*.funeral.com.sg
*.furniture.com.sg
*.grocery.sg
*.healthfood.com.sg
*.healthfood.sg
*.holiday.com.sg
*.hostel.sg
*.hosting.sg
*.ipaif.pro
*.kitchen.sg
*.library.com.sg
*.lingerie.com.sg
*.maids.sg
*.movies.com.sg
*.multimediale.com
*.nursery.sg
*.obituary.sg
*.party.sg
*.perfumes.sg
*.pickboxer.com.au
*.powerfultech.com
*.renasnatbank.com
*.taplesadvantage.com
*.theofania.com
*.traffic.com.sg
*.tuiguang8.org.cn
*.tuition.com.sg
*.uncommonngoods.com
*.uploading.com.au
*.whichphysiotherapist.com.au
*.wwwduffyscatering.com
*.wwwpetsbest.com
*.zmnjq.cn
*.zywienie.com
abille.com
art.com.sg
auction.com.sg
bible.sg
brisneyland.com
career.sg
cho-katsu.info
church.sg
coffee.sg
compostableproduct.com
condoms.sg
courier.sg
dating.sg
eyewear.sg
fdx.au
forextradecourse.us
funeral.com.sg
furniture.com.sg
grocery.sg
healthfood.com.sg
healthfood.sg
holiday.com.sg
hostel.sg
hosting.sg
ipaif.pro
kitchen.sg
library.com.sg
lingerie.com.sg
maids.sg
movies.com.sg
multimediale.com
nursery.sg
obituary.sg
party.sg
perfumes.sg
pickboxer.com.au
powerfultech.com
renasnatbank.com
taplesadvantage.com
theofania.com
traffic.com.sg
tuiguang8.org.cn
tuition.com.sg
uncommonngoods.com
uploading.com.au
whichphysiotherapist.com.au
wwwduffyscatering.com
wwwpetsbest.com
zmnjq.cn
zywienie.com

Other certificates including the domain name holiday.com.sg

(limited to 100 certificates)
azhome.site
4wbvl.us
holiday.com.sg
holiday.com.sg
holiday.com.sg
banphe.com
holiday.com.sg
coahcoutlet.com
hotelflat.com

Certificate

The complete raw certificate details for holiday.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzbSyxH28Qq8zewwuUrGz
CmrZD/jw4ZyPQK87eDCm5P4xgq6Y2hrv3dYNq9wzLt63T7JUMjP9K4NhDatkTzqS
3bU6uCwQqdPv6zq+vloed/Tc2Y/M1Yn5QWktBpBUfqyBr41lW6qMIb/jHpauk1Nf
kgu7VKH68H/dF64Kpea1GxAhA8kXDlt2L+omp18LW9fFRCgVo4eNzrAoxi2rI2Ah
w4oPuF5aL1f1l0L1taCY55HA69r1g2XBw4vCl+CfQkPxfC1dFAEsI/Wc42MCnVil
An5LtWUYKVp34MSvTVi4NJLwE5n2pXz9sQrSiqGYMuQUMdhk80aJdSZkTh70aTrJ
g18doeDRn1Hg4WvfiIb1HMURyZHf4Uwm8eBObUVzaXvXe8+MZz3DNA4Z56Y639F8
B0Tx55YJBHGdyZjVoGM3wwrkBiFl69forx+ej5vwF4EqCZRlSmVlEp3MjudpYdSW
aWavA2bhJLUCR+ULy34UX/6JrzIArqr4e1QjF1c1cdg8Bz0GlqGKPWaL0NFF6lMQ
RDN4EfeO/Djd8qZZFrwT+oRuxps6YI/wY65t9FKflHi7lnRpw7hNjTx7c9PHfz5Z
klJ38iWtJ060U2J82TznlzOWbtWUVflVb2gCBJeaf6En9u9vlRV7G9tYL1ml9NjF
Vxt3yFxFjDwXTrOtI2l0TbkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368752229307186186802613257625599028183644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 11:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 11:25:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holiday.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839206662035603182951438878457658100831539301575378428729581482375695809384737667633784377499741210114070890733731030762452214572449742401349104227764574684800750403014220499415782779214984080780939709188457591931980072135570359738667784222984553508208204988253687161902504096840990244066395497052742609262425507333843479174106085048018191976639258762884932234274203776992885026921546781379079164621652572411292292372200780507516629438487076579512555756665736310137751958577975867524841517125373059621913015104676840321848969423948511830839358938461534495028752459608362863625261495455342305885300515316439278028122778019482860914950329412119446225974244664674410445881948526859203124652390189283894687246226102054316074273610987295528667846607108379953740212400568160765818738830636294987822379402887670676076799172448490854777480662056838613723247006497383134362709944641397154706043391676139780169206692673887945057625571128218998349954208575710466613876459097289648084382491839728498476830961618454507020904148482334650579062709054042259309036171778684219718567402547730692998742678972281235784095786131501043467839836105380589045461380180468090798374950306616286356830977200661083052332015512663003932726065587479816072963837369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed665e529b940bbd69cdea32df5785e476bd7b78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bible.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisneyland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cho-katsu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compostableproduct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forextradecourse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfood.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipaif.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchen.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maids.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimediale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obituary.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfumes.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerfultech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renasnatbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taplesadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theofania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuiguang8.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncommonngoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploading.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwduffyscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwpetsbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmnjq.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zywienie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bible.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisneyland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho-katsu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compostableproduct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forextradecourse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfood.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipaif.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maids.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituary.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfumes.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickboxer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerfultech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renasnatbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taplesadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theofania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffic.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuiguang8.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommonngoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploading.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichphysiotherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwduffyscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwpetsbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmnjq.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zywienie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcdcb178c000004030046304402203995eb2e94ed911cfed4c82364e0dede2e29c06a03850772d1191763b548ea090220141628e3ca6b1d004e429610520eb0984bf9fc8a3b0b7a02c15f23f318416d1d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bcdcb17c50000040300483046022100f0182cd129fcffb104ca29db451fc5bf08526c9270475451dfec189f1f68e4ae022100ef1c5411fddc76562380c7f4150cffc134d4f76393fa0bf4eb86c4fddbdcfc54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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