hotelflat.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d4:88:ad:b0:07:58:37:9c:5b:ce:51:f5:01:4c:32:1a:22 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hotelflat.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:88:ad:b0:07:58:37:9c:5b:ce:51:f5:01:4c:32:1a:22
Serial Number (int): 420770682359349205215086562441855086238242
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:ca:53:00:cb:06:c8:35:53:c6:19:0e:e2:85:c1:0d:81:c9:74:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:65:fa:b9:3b:1d:e4:1d:20:16:a7:b6:65:35:b5:94:04:a7:b0:03
Fingerprint (sha256): f3:0d:09:10:3b:8e:c4:90:49:da:a1:95:a4:76:7a:1d:42:e8:65:cc:cc:8e:1b:cc:fa:33:33:f2:2a:86:ea:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hotelflat.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hotelflat.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1953.au
*.auction.com.sg
*.baby.sg
*.batais.com
*.bikeforcerichmond.com.au
*.blineds.com
*.career.sg
*.church.sg
*.cinema.sg
*.coahcoutlet.com
*.condoms.sg
*.courier.sg
*.cumsplash.me
*.eyewear.sg
*.forums.sg
*.funeral.com.sg
*.furniture.sg
*.gapfactroy.com
*.getseg.com
*.grocery.sg
*.healthfood.sg
*.holiday.com.sg
*.hostel.sg
*.hosting.sg
*.hotelflat.com
*.influencer.au
*.inscover.com
*.job.sg
*.josou.com
*.kurucu.com
*.lingerie.com.sg
*.lingerie.sg
*.mines.net.au
*.multimediale.com
*.naritas.com
*.office.sg
*.onrmainfinancial.com
*.orchardroad.com.sg
*.party.sg
*.pixedlrain.com
*.poese.com
*.quehiciste.com
*.skishuttles.com
*.sorowar.info
*.steta.com
*.stitchery.com.au
*.thacupid.com
*.theweightlosscentre.com.au
*.tradignview.com
*.tuition.com.sg
1953.au
auction.com.sg
baby.sg
batais.com
bikeforcerichmond.com.au
blineds.com
career.sg
church.sg
cinema.sg
coahcoutlet.com
condoms.sg
courier.sg
cumsplash.me
eyewear.sg
forums.sg
funeral.com.sg
furniture.sg
gapfactroy.com
getseg.com
grocery.sg
healthfood.sg
holiday.com.sg
hostel.sg
hosting.sg
hotelflat.com
influencer.au
inscover.com
job.sg
josou.com
kurucu.com
lingerie.com.sg
lingerie.sg
mines.net.au
multimediale.com
naritas.com
office.sg
onrmainfinancial.com
orchardroad.com.sg
party.sg
pixedlrain.com
poese.com
quehiciste.com
skishuttles.com
sorowar.info
steta.com
stitchery.com.au
thacupid.com
theweightlosscentre.com.au
tradignview.com
tuition.com.sg

Other certificates including the domain name hotelflat.com

(limited to 100 certificates)
hotelflat.com
litephone.com
hotelflat.com
schildmeyer.com
lanai.net
hotelflat.com
www.hotelvictory.com

Certificate

The complete raw certificate details for hotelflat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMCDCCCvCgAwIBAgISBNSIrbAHWDecW85R9QFMMhoiMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMTkxMTE5NTlaFw0yMzA2MTcxMTE5NThaMBgxFjAUBgNVBAMT
DWhvdGVsZmxhdC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7
4HOxfP2Hl5feFHK0bzdCGZA9ofNlOHr3c1gkFwcRa0ceVUEhjbiV3fWGrNCitW4/
xrLd0SvkV8vY5eQO/tumxzKyKUcvaY2iFJpb7DG18pJgjPrb9OhRMyQxxLYbhXy4
UaVW/YmrpYXeHuto2NibzI/FiwtiEi45Tj4SI0wbdB0B4CiTFCd3JG5tpelHFuFZ
sk745zzSh7cwZoKCv3ZVZfCOQsvwBIUOzITXU4S/4P7VJTnDRIJjCAwz5NUE1UND
LTy7xlhhhUvFX9LgBDhxSqXXikaTDfWpSmXzXN0e17DMDeiM7QyWWoN1i5vmzgul
lk/LsZ3jwWVBS+p3dIKPFTaesmTiriuyPn2rlgzMLcNMHnQSqQKrCeuvgYx81iyY
MtfWZnHhuZepWJsT8RwhGojKi5zP8w8rR64XHrHDDhKlf4vv1qkJlSIzkTI/eN55
OJVNAqrGDkje6dZSFFEee8HR3boY6eyK17KXMZIW76l4fnho8SJ1D2elZKOqpS0E
A63b047PdF6383X7DlH+EiB2yZh6MwAHgB2c5YKNLLqqxxNXbP/vLiSn9cAcXCre
MR6P8SUk4vIedY4GjBTQZu4UmlDthkWHDMZegwBqvc2aaIGcuibxlnjmBzjDJ5MG
Cz1RLbsm07whP8E2VUEwdVaRcWMEhNZzlKwHOjLpCwIDAQABo4IIMDCCCCwwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQBylMAywbINVPGGQ7ihcENgcl0JjAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBf8GA1UdEQSCBfYwggXyggkqLjE5NTMuYXWCECou
YXVjdGlvbi5jb20uc2eCCSouYmFieS5zZ4IMKi5iYXRhaXMuY29tghoqLmJpa2Vm
b3JjZXJpY2htb25kLmNvbS5hdYINKi5ibGluZWRzLmNvbYILKi5jYXJlZXIuc2eC
CyouY2h1cmNoLnNnggsqLmNpbmVtYS5zZ4IRKi5jb2FoY291dGxldC5jb22CDCou
Y29uZG9tcy5zZ4IMKi5jb3VyaWVyLnNngg4qLmN1bXNwbGFzaC5tZYIMKi5leWV3
ZWFyLnNnggsqLmZvcnVtcy5zZ4IQKi5mdW5lcmFsLmNvbS5zZ4IOKi5mdXJuaXR1
cmUuc2eCECouZ2FwZmFjdHJveS5jb22CDCouZ2V0c2VnLmNvbYIMKi5ncm9jZXJ5
LnNngg8qLmhlYWx0aGZvb2Quc2eCECouaG9saWRheS5jb20uc2eCCyouaG9zdGVs
LnNnggwqLmhvc3Rpbmcuc2eCDyouaG90ZWxmbGF0LmNvbYIPKi5pbmZsdWVuY2Vy
LmF1gg4qLmluc2NvdmVyLmNvbYIIKi5qb2Iuc2eCCyouam9zb3UuY29tggwqLmt1
cnVjdS5jb22CESoubGluZ2VyaWUuY29tLnNngg0qLmxpbmdlcmllLnNngg4qLm1p
bmVzLm5ldC5hdYISKi5tdWx0aW1lZGlhbGUuY29tgg0qLm5hcml0YXMuY29tggsq
Lm9mZmljZS5zZ4IWKi5vbnJtYWluZmluYW5jaWFsLmNvbYIUKi5vcmNoYXJkcm9h
ZC5jb20uc2eCCioucGFydHkuc2eCECoucGl4ZWRscmFpbi5jb22CCyoucG9lc2Uu
Y29tghAqLnF1ZWhpY2lzdGUuY29tghEqLnNraXNodXR0bGVzLmNvbYIOKi5zb3Jv
d2FyLmluZm+CCyouc3RldGEuY29tghIqLnN0aXRjaGVyeS5jb20uYXWCDioudGhh
Y3VwaWQuY29tghwqLnRoZXdlaWdodGxvc3NjZW50cmUuY29tLmF1ghEqLnRyYWRp
Z252aWV3LmNvbYIQKi50dWl0aW9uLmNvbS5zZ4IHMTk1My5hdYIOYXVjdGlvbi5j
b20uc2eCB2JhYnkuc2eCCmJhdGFpcy5jb22CGGJpa2Vmb3JjZXJpY2htb25kLmNv
bS5hdYILYmxpbmVkcy5jb22CCWNhcmVlci5zZ4IJY2h1cmNoLnNnggljaW5lbWEu
c2eCD2NvYWhjb3V0bGV0LmNvbYIKY29uZG9tcy5zZ4IKY291cmllci5zZ4IMY3Vt
c3BsYXNoLm1lggpleWV3ZWFyLnNngglmb3J1bXMuc2eCDmZ1bmVyYWwuY29tLnNn
ggxmdXJuaXR1cmUuc2eCDmdhcGZhY3Ryb3kuY29tggpnZXRzZWcuY29tggpncm9j
ZXJ5LnNngg1oZWFsdGhmb29kLnNngg5ob2xpZGF5LmNvbS5zZ4IJaG9zdGVsLnNn
ggpob3N0aW5nLnNngg1ob3RlbGZsYXQuY29tgg1pbmZsdWVuY2VyLmF1ggxpbnNj
b3Zlci5jb22CBmpvYi5zZ4IJam9zb3UuY29tggprdXJ1Y3UuY29tgg9saW5nZXJp
ZS5jb20uc2eCC2xpbmdlcmllLnNnggxtaW5lcy5uZXQuYXWCEG11bHRpbWVkaWFs
ZS5jb22CC25hcml0YXMuY29tgglvZmZpY2Uuc2eCFG9ucm1haW5maW5hbmNpYWwu
Y29tghJvcmNoYXJkcm9hZC5jb20uc2eCCHBhcnR5LnNngg5waXhlZGxyYWluLmNv
bYIJcG9lc2UuY29tgg5xdWVoaWNpc3RlLmNvbYIPc2tpc2h1dHRsZXMuY29tggxz
b3Jvd2FyLmluZm+CCXN0ZXRhLmNvbYIQc3RpdGNoZXJ5LmNvbS5hdYIMdGhhY3Vw
aWQuY29tghp0aGV3ZWlnaHRsb3NzY2VudHJlLmNvbS5hdYIPdHJhZGlnbnZpZXcu
Y29tgg50dWl0aW9uLmNvbS5zZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELP
ep81xJ4dCYEl7bSZAAABhvnP7zYAAAQDAEYwRAIgdKsCx/7fdXq7MQbae1aLATzz
D7yQztREMPmRTUizNBsCIE2EThE5zgHGoNWiaHt43I1tLcY95orUo0KXjRGPhfvl
AHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGG+c/vZAAABAMA
RzBFAiEA4M1L1RTMu9sZpM0rgYUa9qYNo+F8hlW5DgHhgNm0kiMCIAkm6EVOGTr3
G2xk4doM7d6v9k2yj58Jsg/jrdpy7sQ2MA0GCSqGSIb3DQEBCwUAA4IBAQA3oFWv
euqPcUmk5BPClWHEzIr8j42a4C5VQbw7iBFcJwkbs6CqNTGZAuIxAsgaYSxAUc4c
egwJU4TM9Bv3DrhYDL35NtURP6hM8oKKt+h1AOYQrpnu7tXgERAoeMLhQ+Fm71GQ
EpgLWmn5XEahXHBK/lfbLFkxh+AuFeq0demtcCtTYEDVFeGKkk26GloYJow8cdBW
pZaAW+CFR4KW8ZDfSKTDL4oWeNmBVyppBdnjTmidvcKR06VasPtyNQhQS9Q3uNrm
UUWHCvo3YA/kJPK1Ps8AGGdeDcW6rgH0XnAotOe6XTuuNOP1LenZNbmgdXLfTwRv
2sEx5IZ8hzxCibXa
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+BzsXz9h5eX3hRytG83
QhmQPaHzZTh693NYJBcHEWtHHlVBIY24ld31hqzQorVuP8ay3dEr5FfL2OXkDv7b
pscysilHL2mNohSaW+wxtfKSYIz62/ToUTMkMcS2G4V8uFGlVv2Jq6WF3h7raNjY
m8yPxYsLYhIuOU4+EiNMG3QdAeAokxQndyRubaXpRxbhWbJO+Oc80oe3MGaCgr92
VWXwjkLL8ASFDsyE11OEv+D+1SU5w0SCYwgMM+TVBNVDQy08u8ZYYYVLxV/S4AQ4
cUql14pGkw31qUpl81zdHtewzA3ojO0MllqDdYub5s4LpZZPy7Gd48FlQUvqd3SC
jxU2nrJk4q4rsj59q5YMzC3DTB50EqkCqwnrr4GMfNYsmDLX1mZx4bmXqVibE/Ec
IRqIyoucz/MPK0euFx6xww4SpX+L79apCZUiM5EyP3jeeTiVTQKqxg5I3unWUhRR
HnvB0d26GOnsiteylzGSFu+peH54aPEidQ9npWSjqqUtBAOt29OOz3Ret/N1+w5R
/hIgdsmYejMAB4AdnOWCjSy6qscTV2z/7y4kp/XAHFwq3jEej/ElJOLyHnWOBowU
0GbuFJpQ7YZFhwzGXoMAar3NmmiBnLom8ZZ45gc4wyeTBgs9US27JtO8IT/BNlVB
MHVWkXFjBITWc5SsBzoy6QsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420770682359349205215086562441855086238242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 11:19:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 11:19:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hotelflat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766470331237593300074585104770974941958324227575424719876324494968271172388854268658420819967075407147048633667628779833265335411660945136730683886083246073366370804618568237292554162360487279020661783885719679782359751502716361878983051086220556748233817665771929038661040138909841222043821323613526815657871322175397496857772774630782836900801850623484767267730810145154054241059409257938029999478361056166483467921546757406518116329018062801795374078785777639053738751552039031053394945798512026558137165724110713408285519546946294977833625596045638478782382288752539171771002402278649426740399596166501538398038992817605575979413678659656543789086046816270522496986975919089151308369468354401694239748743462590573216559494372699737545911030666578094710714016382815983117158698824167599832473290327165538711069089480411815630527550682496272718925282878872566682163741711693666302702106461483369123799654178526938252780861788439096639892235486935657249171305607346905242930509871469561394300738825356934761680763586984916962755458840168067785939508989421171176575393895943171177310697288572871810062174487559145393652246790608599160106023366096034070318154674598445720370701864983619605057743195621165586873341823760031039834220811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01ca5300cb06c83553c6190ee285c10d81c97426
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blineds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coahcoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumsplash.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gapfactroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getseg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelflat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inscover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurucu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimediale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naritas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrmainfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixedlrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quehiciste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skishuttles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sorowar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thacupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theweightlosscentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradignview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuition.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1953.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blineds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coahcoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condoms.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courier.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumsplash.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyewear.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeral.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapfactroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getseg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grocery.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfood.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiday.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostel.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelflat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurucu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingerie.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naritas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrmainfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardroad.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixedlrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quehiciste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skishuttles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorowar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thacupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweightlosscentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradignview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuition.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f9cfef360000040300463044022074ab02c7fedf757abb3106da7b568b013cf30fbc90ced44430f9914d48b3341b02204d844e1139ce01c6a0d5a2687b78dc8d6d2dc63de68ad4a342978d118f85fbe5007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186f9cfef640000040300473045022100e0cd4bd514ccbbdb19a4cd2b81851af6a60da3e17c8655b90e01e180d9b4922302200926e8454e193af71b6c64e1da0ceddeaff64db28f9f09b20fe3adda72eec436
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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