office.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:49:7e:09:25:07:6d:06:1f:43:02:ac:40:5a:65:25:e5:78 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=office.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:7e:09:25:07:6d:06:1f:43:02:ac:40:5a:65:25:e5:78
Serial Number (int): 286345000789687367726099167085187106727288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:bd:b9:b2:61:50:21:75:0d:95:f7:73:e0:9c:16:5a:f5:90:1d:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:89:b4:ff:0a:07:66:b1:71:dd:1c:3e:62:3c:bc:4c:ec:c1:f2:98
Fingerprint (sha256): e0:ae:a3:02:9f:04:cf:47:ec:ec:c3:5b:85:ae:36:10:6a:1f:27:ec:28:ab:09:37:f9:77:bf:6f:db:dc:51:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate office.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for office.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1953.au
*.948.co.in
*.aahil.name
*.advantagesanddisadvantages.com
*.aggys.com
*.baby.sg
*.braghini.com
*.brides.sg
*.broflo.com.au
*.car.com.sg
*.cestare.com
*.chomis.com
*.cinema.sg
*.cuisine.sg
*.financereview.pro
*.florists.sg
*.forums.sg
*.furniture.sg
*.grontkowskimonument.com
*.job.sg
*.kasbarian.com
*.kinglun.com
*.lingerie.sg
*.livley.com
*.loveme.co
*.luthe.com
*.maid.com.sg
*.mcoinmarket.com
*.mmihh.cn
*.newtrafficserver.com
*.nicific.com
*.office.sg
*.orchardroad.com.sg
*.orlandohealth.co
*.pienmont.tv
*.poese.com
*.registrar.sg
*.scheells.com
*.shippingestimate.com
*.shirayukihime.com
*.smartpop.com
*.supercarro.com
*.taobaol.com
*.udjplayer.com
*.vacations.com.sg
*.vaycuoi.com
*.whichspecialist.com.au
*.wine.com.sg
*.yellowstoneriver.com
*.zorbing.com.au
1953.au
948.co.in
aahil.name
advantagesanddisadvantages.com
aggys.com
baby.sg
braghini.com
brides.sg
broflo.com.au
car.com.sg
cestare.com
chomis.com
cinema.sg
cuisine.sg
financereview.pro
florists.sg
forums.sg
furniture.sg
grontkowskimonument.com
job.sg
kasbarian.com
kinglun.com
lingerie.sg
livley.com
loveme.co
luthe.com
maid.com.sg
mcoinmarket.com
mmihh.cn
newtrafficserver.com
nicific.com
office.sg
orchardroad.com.sg
orlandohealth.co
pienmont.tv
poese.com
registrar.sg
scheells.com
shippingestimate.com
shirayukihime.com
smartpop.com
supercarro.com
taobaol.com
udjplayer.com
vacations.com.sg
vaycuoi.com
whichspecialist.com.au
wine.com.sg
yellowstoneriver.com
zorbing.com.au

Other certificates including the domain name office.sg

(limited to 100 certificates)
kelvinrail.com
brides.sg
holiday.com.sg
crewventure.com
studentdoctors.net
noveltycondoms.com
office.sg
crewventure.com
hotelflat.com

Certificate

The complete raw certificate details for office.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL8zCCCtugAwIBAgISA0l+CSUHbQYfQwKsQFplJeV4MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQxMTI1NThaFw0yNDAyMTIxMTI1NTdaMBQxEjAQBgNVBAMT
CW9mZmljZS5zZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN6iwXoH
m7cYliQQXmz1JistiesmO9WeNPjbtQbBbFMQWOaRMYZxpJNjjw+N9/UEEs+9ZEBs
lu1HnbsWK8Q/jXsx4+tiJWVbuMbreNWE4O98SwO8/RXLiwXHgHpoznsHcw0X8/S2
/cQQfgoQbzm6ZfWc2bcVsBMej3c44uqK3ReWbEO5/WIMVbwBGqcBKyMz/s7eK+NP
/Qup/CYU3eY2/mCo6wYMrnRpbv7CqUakkkcgDuTsotMGEYgEi8LBbTzOF6PFNAPL
fdgyVdAAjl6C2hB4lObUSMHtA0HHEmwxoGpPRXqpjHYanQAn7uIsumChFN1fgDF1
CEd9E15O8YJ7Z8PVpKBsB7Xj3MpaFfmW3tZ6oaudCR91wIky642ksZRWi8wSIyO8
fuW/YeQJVKAYj5oNT4fB1swVOfklWx8EFWQTR57X/jsrE5x0cwIbjLGJFEYPgBR8
p7iNumDPSLAVqeV6x2NYL8aepGIkZ7bOxpERvFCpgFERfWFI46VA7yEIke4oRq8E
BRg2yq28/Cs23oGCC4UXdCyEEFUWNTm/H6vvt2u4+9vFfngSJEi26qX4AYNg3RlN
75dEmbYaCzxf2zJmgaLmJIE4sYg1HoPd/69wC6zMZjLeuHoKmHGMDyJL30DxuptM
PG3mLg5e/OKOMpRZLC/txSSOgCE1Pn/WicGTAgMBAAGjgggfMIIIGzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCy9ubJhUCF1DZX3c+CcFlr1kB1YMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIGJQYDVR0RBIIGHDCCBhiCCSouMTk1My5hdYILKi45NDgu
Y28uaW6CDCouYWFoaWwubmFtZYIgKi5hZHZhbnRhZ2VzYW5kZGlzYWR2YW50YWdl
cy5jb22CCyouYWdneXMuY29tggkqLmJhYnkuc2eCDiouYnJhZ2hpbmkuY29tggsq
LmJyaWRlcy5zZ4IPKi5icm9mbG8uY29tLmF1ggwqLmNhci5jb20uc2eCDSouY2Vz
dGFyZS5jb22CDCouY2hvbWlzLmNvbYILKi5jaW5lbWEuc2eCDCouY3Vpc2luZS5z
Z4ITKi5maW5hbmNlcmV2aWV3LnByb4INKi5mbG9yaXN0cy5zZ4ILKi5mb3J1bXMu
c2eCDiouZnVybml0dXJlLnNnghkqLmdyb250a293c2tpbW9udW1lbnQuY29tgggq
LmpvYi5zZ4IPKi5rYXNiYXJpYW4uY29tgg0qLmtpbmdsdW4uY29tgg0qLmxpbmdl
cmllLnNnggwqLmxpdmxleS5jb22CCyoubG92ZW1lLmNvggsqLmx1dGhlLmNvbYIN
Ki5tYWlkLmNvbS5zZ4IRKi5tY29pbm1hcmtldC5jb22CCioubW1paGguY26CFiou
bmV3dHJhZmZpY3NlcnZlci5jb22CDSoubmljaWZpYy5jb22CCyoub2ZmaWNlLnNn
ghQqLm9yY2hhcmRyb2FkLmNvbS5zZ4ISKi5vcmxhbmRvaGVhbHRoLmNvgg0qLnBp
ZW5tb250LnR2ggsqLnBvZXNlLmNvbYIOKi5yZWdpc3RyYXIuc2eCDiouc2NoZWVs
bHMuY29tghYqLnNoaXBwaW5nZXN0aW1hdGUuY29tghMqLnNoaXJheXVraWhpbWUu
Y29tgg4qLnNtYXJ0cG9wLmNvbYIQKi5zdXBlcmNhcnJvLmNvbYINKi50YW9iYW9s
LmNvbYIPKi51ZGpwbGF5ZXIuY29tghIqLnZhY2F0aW9ucy5jb20uc2eCDSoudmF5
Y3VvaS5jb22CGCoud2hpY2hzcGVjaWFsaXN0LmNvbS5hdYINKi53aW5lLmNvbS5z
Z4IWKi55ZWxsb3dzdG9uZXJpdmVyLmNvbYIQKi56b3JiaW5nLmNvbS5hdYIHMTk1
My5hdYIJOTQ4LmNvLmluggphYWhpbC5uYW1lgh5hZHZhbnRhZ2VzYW5kZGlzYWR2
YW50YWdlcy5jb22CCWFnZ3lzLmNvbYIHYmFieS5zZ4IMYnJhZ2hpbmkuY29tggli
cmlkZXMuc2eCDWJyb2Zsby5jb20uYXWCCmNhci5jb20uc2eCC2Nlc3RhcmUuY29t
ggpjaG9taXMuY29tggljaW5lbWEuc2eCCmN1aXNpbmUuc2eCEWZpbmFuY2VyZXZp
ZXcucHJvggtmbG9yaXN0cy5zZ4IJZm9ydW1zLnNnggxmdXJuaXR1cmUuc2eCF2dy
b250a293c2tpbW9udW1lbnQuY29tggZqb2Iuc2eCDWthc2Jhcmlhbi5jb22CC2tp
bmdsdW4uY29tggtsaW5nZXJpZS5zZ4IKbGl2bGV5LmNvbYIJbG92ZW1lLmNvggls
dXRoZS5jb22CC21haWQuY29tLnNngg9tY29pbm1hcmtldC5jb22CCG1taWhoLmNu
ghRuZXd0cmFmZmljc2VydmVyLmNvbYILbmljaWZpYy5jb22CCW9mZmljZS5zZ4IS
b3JjaGFyZHJvYWQuY29tLnNnghBvcmxhbmRvaGVhbHRoLmNvggtwaWVubW9udC50
doIJcG9lc2UuY29tggxyZWdpc3RyYXIuc2eCDHNjaGVlbGxzLmNvbYIUc2hpcHBp
bmdlc3RpbWF0ZS5jb22CEXNoaXJheXVraWhpbWUuY29tggxzbWFydHBvcC5jb22C
DnN1cGVyY2Fycm8uY29tggt0YW9iYW9sLmNvbYINdWRqcGxheWVyLmNvbYIQdmFj
YXRpb25zLmNvbS5zZ4ILdmF5Y3VvaS5jb22CFndoaWNoc3BlY2lhbGlzdC5jb20u
YXWCC3dpbmUuY29tLnNnghR5ZWxsb3dzdG9uZXJpdmVyLmNvbYIOem9yYmluZy5j
b20uYXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYvNy6h4AAAE
AwBIMEYCIQChH4W6rS1Bglc5pDzNxs6UN1297ouq6kOYeY/C2f01FwIhAPBVoPlX
D2pmtbrnCEoI5mNXoVgIeWt0cW50LSkKWh06AHYA7s3QZNXbGs7FXLedtM0TojKH
Rny87N7DUUhZRnEftZsAAAGLzcuofQAABAMARzBFAiBlQVUzkliW6uaiGIciH4PS
hDuTuwp82o51QmHmOP6A1wIhALGoP1zCweqNpSUnB1TBhVJB8zJICYPDhC9DV9JN
0A6xMA0GCSqGSIb3DQEBCwUAA4IBAQChmhDUfLl2R+3rvCuf+wCM6WWWEPYLZdWh
54EzQpzduXLYL3Us3jPFjxfvW/2mkvZWxzmHK31sIgkYM7DDNOod7GyYOzYS2LZR
43p92uuCIqqEVaJhLMF+PUu2mA6KQjd9/Lkqa1+vBcS2Xx7E1kUXVeio5udgMu+S
4X3kiOqWLlZ0NnkrZrQvz8m8i0FIo6sK7PcuqAB2at/hdOAlq4LEVIf/j/NMYH8J
vjAoaDzG97xPRHRA8RknGnlW3WcBvxl50rv4XpKIkkFqzJsQ+jQQlBnL7KuROI+B
B5HFlY6eG7PiY9zJ6Lt4+p/i2Bo9l8uUiTPKMVx6fiq3owuP2PcT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286345000789687367726099167085187106727288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 11:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 11:25:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'office.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908274676868367547919599495147544975810547423675643940701867594298338906892085097006714714355455555043044532043894953352129353651982294712525562783339951269109263752779600349907285803330752546653985171236887710385854009578293489071489533319760434258832369908263459961677408041145426448961941932287364559386093357551410377297502855206575919047148182016103808607240548638960650226582125201797681401932536454784901088091927863664979593360608252940739842389504032330551457987056684084271619268902939649961374996256295313215518129601983095605881280280628010795390664391939127573304470176626902091888319080970873333150591907129288855520112022008890422826916649618140926549920129174060686356159151327498301593201773881786627860383853847050839514195207500664472598090724751292301794061510942162462352901826432559434832197474942554798822242682030084976196614963743491963211791995719982658082152800360802601519288720264351614599969292416253665371551951084298182671851445774607614227791733237926588957847115947332719120908867960335287394401656268501215850963926595827244652913404248597325071213220729979298544555635810241038725080945815086424927462298824404115463084210888685126993857588394127194335857411633073693314661019874390221247889392019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cbdb9b2615021750d95f773e09c165af5901d58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aahil.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advantagesanddisadvantages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broflo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financereview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kasbarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luthe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcoinmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmihh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtrafficserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pienmont.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udjplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowstoneriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zorbing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahil.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagesanddisadvantages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brides.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broflo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisine.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financereview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florists.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasbarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luthe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maid.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcoinmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmihh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrafficserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandohealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pienmont.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udjplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowstoneriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zorbing.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcdcba8780000040300483046022100a11f85baad2d41825739a43ccdc6ce94375dbdee8baaea4398798fc2d9fd3517022100f055a0f9570f6a66b5bae7084a08e66357a15808796b74716e742d290a5a1d3a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcdcba87d0000040300473045022065415533925896eae6a21887221f83d2843b93bb0a7cda8e754261e638fe80d7022100b1a83f5cc2c1ea8da525270754c1855241f332480983c3842f4357d24dd00eb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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