jewellery.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:43:73:a1:05:09:9c:bd:67:cf:44:9e:3e:29:0a:81:7c:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jewellery.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:73:a1:05:09:9c:bd:67:cf:44:9e:3e:29:0a:81:7c:a7
Serial Number (int): 284289473660466716544175864797699162340519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:5d:48:42:8b:04:88:16:8f:0d:b6:a8:9c:6d:f5:a8:02:5e:9b:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:3f:de:b0:15:f4:d3:44:44:89:50:80:2a:b9:b2:a8:ab:a1:b2:98
Fingerprint (sha256): e3:bc:d8:5f:50:8d:24:d4:19:e3:4c:be:c8:35:64:81:62:7f:88:60:3a:15:c1:f3:59:78:83:85:d2:5a:a9:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jewellery.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jewellery.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrotoxico.com
*.aimar.com
*.almaarefqatar.com
*.aranciarossa.com
*.artesano.com
*.auctions.sg
*.beiza.com
*.blockchainbanco.com
*.bodasperu.com
*.brolar.com
*.bytecycler.com
*.clsrksusa.com
*.collapsiblegear.com
*.comparesidebyside.com
*.decolaar.com
*.dental.sg
*.ecletico.com
*.exhibition.sg
*.fitnessconnectionusa.com
*.food.sg
*.getintouchwithus.com
*.grafiki.com
*.health.com.sg
*.internet.com.sg
*.jewellery.sg
*.kaksus.com
*.kalaignar.com
*.kawande.com
*.lastimosa.com
*.lesgrandscrus.com
*.liuzmo.com
*.lumosa.com
*.macrocar.com
*.metissa.com
*.moneychanger.com.sg
*.mythetesa.com
*.organiceco.com
*.p2guide.com
*.piovano.com
*.praino.com
*.proenza.com
*.snakeproofgear.com
*.ssp36.cc
*.trabajodecasa.com
*.unmcradiology.net
*.vastly.com.au
*.villachessa.com
*.weddings.com.sg
*.women.sg
*.xilar.com
agrotoxico.com
aimar.com
almaarefqatar.com
aranciarossa.com
artesano.com
auctions.sg
beiza.com
blockchainbanco.com
bodasperu.com
brolar.com
bytecycler.com
clsrksusa.com
collapsiblegear.com
comparesidebyside.com
decolaar.com
dental.sg
ecletico.com
exhibition.sg
fitnessconnectionusa.com
food.sg
getintouchwithus.com
grafiki.com
health.com.sg
internet.com.sg
jewellery.sg
kaksus.com
kalaignar.com
kawande.com
lastimosa.com
lesgrandscrus.com
liuzmo.com
lumosa.com
macrocar.com
metissa.com
moneychanger.com.sg
mythetesa.com
organiceco.com
p2guide.com
piovano.com
praino.com
proenza.com
snakeproofgear.com
ssp36.cc
trabajodecasa.com
unmcradiology.net
vastly.com.au
villachessa.com
weddings.com.sg
women.sg
xilar.com

Other certificates including the domain name jewellery.sg

(limited to 100 certificates)
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
jewellery.sg
laundry.com.sg

Certificate

The complete raw certificate details for jewellery.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284289473660466716544175864797699162340519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-20 22:37:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 22:37:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jewellery.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915785779609371257027183000625995015241242685048487528122585965504037241397495916050425557800551929018042676740353009434155894859549029776308705892817519699165998130204629741648972121464240868450078388743925804955508154748473060285822563911569474128877273347318100722022049214026719661502181302691388272886448419226854088650558854107014232179225120917394813590533171233662574566632593961813928645401165759257012024324128115852050152829110190058957595464052626012464535537245082170969588092757877966733008142266906757996429776216241548786231626384531396247434662697632261869053592545238110569171681869072854628507719161448425746293199754436336523844977857696802168898242809503567198923447648620863290819581930168585058370105184793798640772574373034264001423114249086968712103362034135007225320202806111003627539746784751925305341638676863960591664534556079589189307436106109736978049507932143730805863690196845541853138964568436086953390437115299831673356628661149391372736711857891573254171999567335899119747633828785664155501186729588536716714519196058870541482441613743237370078345721034466333601255527345386936738608811075850540827513764958580026516889246285733805133461033222936590134948325372512906363674968938442097568793301363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							075d48428b0488168f0db6a89c6df5a8025e9b65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodasperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bytecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p2guide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vastly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaarefqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodasperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsrksusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collapsiblegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparesidebyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibition.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessconnectionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getintouchwithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalaignar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawande.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneychanger.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythetesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiceco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2guide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piovano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeproofgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unmcradiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddings.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001883b865a02000004030046304402207c31efd3e97065d1e0426b04fadf492d76d6009424e57903a9cda4c4260c869902202290d27eb1a32d281686aa67e4f491a788fe4adf55b9559a1e1a3ff531009b1d007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001883b865a010000040300463044022019d01703a45bb7996a12805f16215007573ccaa6d4098938dd6a3eed75c33cad022012f6f5e40e6aff5281b839d129365531bb80764fb7176f34cb3fe8ded9e4736c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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