hr.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:84:79:c2:12:f8:f0:81:5f:66:b4:84:b3:e0:75:ea:18 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hr.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:84:79:c2:12:f8:f0:81:5f:66:b4:84:b3:e0:75:ea:18
Serial Number (int): 345902975091327583557413294946367976106520
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:97:91:17:df:37:66:b9:f1:96:2e:6a:47:64:6a:27:65:36:2f:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:4d:8d:7e:d2:d1:59:4e:e2:d9:80:ad:2b:20:27:32:e9:c7:7c:d8
Fingerprint (sha256): ef:6e:22:64:05:0e:90:75:95:ee:34:90:95:89:c4:2d:48:de:9b:80:19:18:20:a6:eb:a7:ac:a6:b1:c3:f4:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hr.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hr.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrotoxico.com
*.aimar.com
*.aranciarossa.com
*.artesano.com
*.avodessa.com
*.bodasperu.com
*.bytecycler.com
*.courier.com.sg
*.courses.sg
*.cruise.com.sg
*.decolaar.com
*.eagleusa.com
*.ecletico.com
*.gatesplus.com
*.girlsside.com
*.gubitosa.com
*.hr.sg
*.iptvplayerlatino.com
*.kachin.com
*.kaksus.com
*.kettlebellusa.com
*.lastimosa.com
*.lesgrandscrus.com
*.littlegirlsnude.com
*.liuzmo.com
*.luchino.com
*.lumosa.com
*.macrocar.com
*.maids.com.sg
*.metissa.com
*.nicksfightclub.com
*.noolhar.com
*.ordenadoressobremesa.com
*.poem.com.sg
*.praino.com
*.profirstaide.com
*.realty.sg
*.russellcelluar.com
*.sedico.com
*.smu.com.sg
*.solipsus.com
*.ssp36.cc
*.storage.com.sg
*.store.com.sg
*.trabajodecasa.com
*.transport.sg
*.vastly.com.au
*.villachessa.com
*.wilhelmus.com
*.wwwbetlegend.com
agrotoxico.com
aimar.com
aranciarossa.com
artesano.com
avodessa.com
bodasperu.com
bytecycler.com
courier.com.sg
courses.sg
cruise.com.sg
decolaar.com
eagleusa.com
ecletico.com
gatesplus.com
girlsside.com
gubitosa.com
hr.sg
iptvplayerlatino.com
kachin.com
kaksus.com
kettlebellusa.com
lastimosa.com
lesgrandscrus.com
littlegirlsnude.com
liuzmo.com
luchino.com
lumosa.com
macrocar.com
maids.com.sg
metissa.com
nicksfightclub.com
noolhar.com
ordenadoressobremesa.com
poem.com.sg
praino.com
profirstaide.com
realty.sg
russellcelluar.com
sedico.com
smu.com.sg
solipsus.com
ssp36.cc
storage.com.sg
store.com.sg
trabajodecasa.com
transport.sg
vastly.com.au
villachessa.com
wilhelmus.com
wwwbetlegend.com

Other certificates including the domain name hr.sg

(limited to 100 certificates)
hr.sg
hr.sg
arrowfence-br.com
arrowfence-br.com
jewellery.sg
jewellery.sg
hr.sg
courses.sg
hr.sg

Certificate

The complete raw certificate details for hr.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345902975091327583557413294946367976106520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 22:39:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 22:39:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hr.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913034583460435514724241373558264420965823269732497538963618588680017032280199677238743020215075461000828246752021565581834932033954428901689555801827814833677497563428192243475932924097878141605778713549456518507585876034794863513788598673655337659230851390353204940474124329871813820401218858892526792844943543200391455626010659688619918310627362304171629711438035567107525883800686505656873956306735276426920158512754089791401065326671388947019952162095116641572041756983368731616679232916889065146062926453066755469661141655431957742060233369629717714443734326480407287809121310343298058199174829003471824962538521759697337926998398575951273458514851656319616612113250031590712494055805927898696444320066263654438871212342530988386122671378770471041495605953865290723879503290325768841183202827669033344822683989224710606381641946687095405896762525586723425654818464705683569333551886641386366723648906732952509080317043524995462666345087960868760765410677167618413086374790939295967801343135581185393456438886818483859162863275235560407627909426404877136112437034545872871322302848877638300443191092795486146561268841064062476220281685532051690064727397211688833858198712997213945809020149001858249393755636618934597866412244979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2979117df3766b9f1962e6a47646a2765362fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodasperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bytecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courses.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eagleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatesplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvplayerlatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kettlebellusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlegirlsnude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maids.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profirstaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russellcelluar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smu.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vastly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilhelmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbetlegend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodasperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatesplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gubitosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvplayerlatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettlebellusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlegirlsnude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maids.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profirstaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realty.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russellcelluar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smu.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilhelmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbetlegend.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189708603d20000040300463044022029b2485489e3b9347e6f8d0942afbcf08a1dfeb9087db9ae7f3528f02e7b11b702201d9726b76e6d4b371858cb109cfddaf062d917a3749b4612c4b24cd61e834995007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018970860478000004030047304502210092c1400dc357dfb80bd058fd1e9c208bee029e83716788f2829c6b08bb9e0dd002205c55996f2212959a2e0e4da2c3b8ecfffc7e4d4cdd0692f943cb259455eee522
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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