smartsenat.upm.edu.my

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 68:ae:05:f4:64:a0:62:c0:10:30:28:de:13:a4:b9:c2 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smartsenat.upm.edu.my

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:ae:05:f4:64:a0:62:c0:10:30:28:de:13:a4:b9:c2
Serial Number (int): 139143291989878377976340241347082762690
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:7e:42:e3:58:c9:4d:87:f6:50:37:ad:ad:da:cb:7d:d9:c2:34:f5
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 30:e0:ca:2f:5c:17:3e:f5:60:70:f1:b0:d7:39:cf:14:05:c6:b4:c3
Fingerprint (sha256): 02:d1:a0:4e:de:9c:78:d0:41:90:71:d5:d2:a9:5b:e7:37:2c:4c:10:0c:4e:27:8d:96:58:25:e2:79:ce:f5:10

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate smartsenat.upm.edu.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartsenat.upm.edu.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smartsenat.upm.edu.my
www.smartsenat.upm.edu.my

Other certificates including the domain name upm.edu.my

(limited to 100 certificates)
*.upm.edu.my
unicefc4d.upm.edu.my
smartsenat.upm.edu.my
putravc.upm.edu.my
imputra.upm.edu.my
pbsportal.upm.edu.my
prototype.upm.edu.my
*.upm.edu.my
mrtg.upm.edu.my
paygate.upm.edu.my
putravc.upm.edu.my
*.upm.edu.my
upm-idm.upm.edu.my
paygate.upm.edu.my
analytics.upm.edu.my
pindahemel.upm.edu.my
cala2020.upm.edu.my
mysec2015.upm.edu.my
ezaccess.upm.edu.my
upm-id.upm.edu.my
cal.upm.edu.my
pindahemel.upm.edu.my
cal.upm.edu.my
putravc.upm.edu.my
cal.upm.edu.my
spruch.ru
ezproxy.upm.edu.my
upm-id.upm.edu.my
ezproxy.upm.edu.my
autoimputex.upm.edu.my
vc.meet247.co
ezproxy.upm.edu.my
*.ezadmin.upm.edu.my
*.upm.edu.my
unicefc4d.upm.edu.my
roddc2019-myageing.upm.edu.my
ezaccess.upm.edu.my
upm-id.upm.edu.my
prototype.upm.edu.my
wbc.upm.edu.my
putraverify.upm.edu.my
imputra.upm.edu.my
upm-idm.upm.edu.my
pgpr2021.upm.edu.my
mtss.agri.upm.edu.my
vc.meet247.co
putravid.upm.edu.my
pindahemel.upm.edu.my
lms.upm.edu.my
kita.planplatte.de
bits.upm.edu.my
putravc-01.upm.edu.my
prototype.upm.edu.my
www.mgu.upm.edu.my.neuroscirn.org
paygate.upm.edu.my
smartsenat.upm.edu.my
upm-id.upm.edu.my
paygate.upm.edu.my
wbc.upm.edu.my
prototype.upm.edu.my
upm-id.upm.edu.my
pbsportal.upm.edu.my
iac2021.upm.edu.my
regmedic.upm.edu.my
email.upm.edu.my
paygate.upm.edu.my
pindahemel.upm.edu.my
ezproxy.upm.edu.my
putravid.upm.edu.my
upm-idm.upm.edu.my
paygate.upm.edu.my
prototype.upm.edu.my
inviteandroid.peachparty.app
paygate.upm.edu.my
cosmos-satreps.upm.edu.my
paygate.upm.edu.my
my-gitlab.upm.edu.my
wbc.upm.edu.my
putracomm.upm.edu.my
prototype.upm.edu.my
imputra.upm.edu.my
cal.upm.edu.my
ezproxy.upm.edu.my
myaestic.upm.edu.my
koikoi.grupopeci.com
wbc.upm.edu.my
my-gitlab.upm.edu.my
analytics.upm.edu.my
putracomm.upm.edu.my
bits.upm.edu.my
pindahemel.upm.edu.my
www.thegoodcrew.io
smartsenat.upm.edu.my
smartsenat.upm.edu.my
wbc.upm.edu.my
mirrors.upm.edu.my
admin.bookinb.io
www.psp.upm.edu.my
upm-idm.upm.edu.my
cosmos-satreps.upm.edu.my

Certificate

The complete raw certificate details for smartsenat.upm.edu.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUBHcOUcJ+Xc9Ppzk0v
Se42IlmSOqzpiMq9jzm+rKWYJndfJEAcs2ytqMZaPKKT/hyPTsXEgV7khYFcHsB5
W5ayO4W+ztYkj5xveek6zalaeCDaNJBEE/gePEMz+UUfseJkFBc7L/ukOF5Pv3WN
P3WtCzrZhKPUk9H1sW5lXRggRonmzIbGxq3US4TutKkbm4igFCmIcCpxno3yKV9g
ETlERX5wwqipUI+PLjlKV2cYT+9H9vyCUxU7H8ErFfJZSY2vGFdFDDL1VpDdTwhd
rQkZbZhoC0QllGNAw4fO0cU1LiRGwDTV3JIIdPNaXEkDVB5QYsx+lsCykcv25nba
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139143291989878377976340241347082762690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 05:17:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 05:17:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smartsenat.upm.edu.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23861507380678416713170044789248083607421863622463241501518482040076786080524856509885356412872200696128882011852733175067583366208736623893089327037974769657573606013803917890650402254704177224174955569526731103122661973209359009029692785174591351850754701099013559619526753708280296207874301977864773906637758514873349560449677323459334891021322192370679000117607812046131374935849697188932859717392918231624312634163826291217303265838606632126318761350596419921771047807231520001606071017770795311441512032364849485334336877894549328456326470765463189856824090687391232813638657406308015587702391232590444909484757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsenat.upm.edu.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartsenat.upm.edu.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d77e42e358c94d87f65037adaddacb7dd9c234f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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