greatactivity-uat.greateasternlife.com

- The Great Eastern Life Assurance Company Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:c6:cd:e3:fd:c1:78:c0:a3:c8:08:23:70:53:d0:c2 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Great Eastern Life Assurance Company Limited

Organization: The Great Eastern Life Assurance Company Limited
Locality: Singapore
Country: SG

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:c6:cd:e3:fd:c1:78:c0:a3:c8:08:23:70:53:d0:c2
Serial Number (int): 11666074701564462589661461775991951554
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:d0:31:a5:64:a3:68:3e:79:e6:76:01:92:6d:c7:03:41:f7:7e:6e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 10:9e:07:f7:a7:01:f4:11:b7:9a:26:25:55:23:19:ef:36:b2:78:a1
Fingerprint (sha256): 06:43:2e:bc:3d:7e:d1:2e:b5:04:9b:97:33:ba:d4:cb:10:22:1d:24:2d:0d:de:a4:5c:5e:71:1b:82:f9:df:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate greatactivity-uat.greateasternlife.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greatactivity-uat.greateasternlife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greatactivity-uat.greateasternlife.com

Other certificates including the domain name greateasternlife.com

(limited to 100 certificates)
www.greateasternlife.com
imperva.com
imperva.com
sso-mymob.greateasternlife.com
upgreat.greateasternlife.com
internal-brandportal.greateasternlife.com
imperva.com
exchange.greateasternlife.com
econnect-my.greateasternlife.com
brandportal.greateasternlife.com
esso-sgmob.greateasternlife.com
aemportal-staging.greateasternlife.com
tracking.csd-my.greateasternlife.com
sso-sgweb.greateasternlife.com
ge-assess.greateasternlife.com
groupinsurance.greateasternlife.com
app.greateasternlife.com
imperva.com
mst.greateasternlife.com
tracking.digital-my.greateasternlife.com
greatlink.greateasternlife.com
secureapp-web2.greateasternlife.com
ge-assess.greateasternlife.com
econnect-id.greateasternlife.com
mpos-my.greateasternlife.com
imperva.com
greatlink.greateasternlife.com
lw-int.greateasternlife.com
greatactivity-uat.greateasternlife.com
cfecampus.greateasternlife.com
fa-epartner-my.greateasternlife.com
ebhub.greateasternlife.com
lifehubapps.greateasternlife.com
ais.greateasternlife.com
fa-epartner-my.greateasternlife.com
bsc-ext.greateasternlife.com
greatactivity.greateasternlife.com
go.greateasternlife.com
tracking.greateasternlife.com
exchange.greateasternlife.com
esso-sgweb.greateasternlife.com
newrep-cfecampus.greateasternlife.com
tableau-gelm.greateasternlife.com
imperva.com
securemail.greateasternlife.com
ulapiapgr.digitalsign.greateasternlife.com
CBJ01-T0-LB01.greateasternlife.com
GELS.FATCA.GREATEASTERNLIFE.COM
tracking.digital-my.greateasternlife.com
sso-sguweb.greateasternlife.com
exchange.greateasternlife.com
app.greateasternlife.com
go.greateasternlife.com
mylamp.greateasternlife.com
app1.greateasternlife.com
filegateway.greateasternlife.com
greatadvice-gels-sg.greateasternlife.com
supremecare.greateasternlife.com
greatactivity.greateasternlife.com
filegateway.greateasternlife.com
sso-mymob.greateasternlife.com
greatidsgfindexsign.greateasternlife.com
tracking.csd-my.greateasternlife.com
synergeoffline-sg.greateasternlife.com
sso-myuweb.greateasternlife.com
uatrewards-sg.greateasternlife.com
imperva.com
imperva.com
tracking.csd-my.greateasternlife.com
cfecontent.greateasternlife.com
giexchange-my.greateasternlife.com
giexchange-sg.greateasternlife.com
epartner-my.greateasternlife.com
rep-admin.greateasternlife.com
erecruitment.greateasternlife.com
imperva.com
pos-vn.greateasternlife.com
tracking.affinity-my.greateasternlife.com
e-sso.greateasternlife.com
imperva.com
imperva.com
tracking.greateasternlife.com
imperva.com
domains2.clickmeter.com
imperva.com
apiuat.greateasternlife.com
bancarome-gw-my.greateasternlife.com
uatrewards-my.greateasternlife.com
GETB.CRS.GREATEASTERNLIFE.COM
imperva.com
imperva.com
mylamp-cfecontent.greateasternlife.com
fpms-id.greateasternlife.com
sso-myumob.greateasternlife.com
glsexp1.greateasternlife.com
uat-bancarome-gw-my.greateasternlife.com
api-geapp.greateasternlife.com
document-uat.greateasternlife.com
imperva.com
securemail.greateasternlife.com

Certificate

The complete raw certificate details for greatactivity-uat.greateasternlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57ky46btbiDR8jOtpe8W
dXiGerrRx2gmlvVS3gYA+wtm3Lov522zQPRD8IeuMzcgk+KOxjp2YSA9tbzTdXwQ
qtlMqUs4qKE+53qlG5pxA57WphVsC8XLHyIgWvjuY2R9g7AalvTFC1pKH9JJUv3c
BiDjiWtGbju8qMQ55sxJO9ZX3fnCcHmmyiDBBtSMqJWc/cHYLBykxLgObKK484/z
PJRqSqkU08a6BOHLx/T7mBCMTY/TssxN/I2X6KImQD5puJBNKO5n8yxdhmcKN/4c
DL7Yli0+zl/OE9CN7ExjX4NvHrLsl92+mIIsT3aemYOSXN1Pam+J45XvnUXxN1eM
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11666074701564462589661461775991951554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Great Eastern Life Assurance Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greatactivity-uat.greateasternlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29252373372358757241047617941603723935961276481582353827867962967551520154527186254717764423978826911600952299205051892735749909423676012365994648218257606096141152545049611639769483255305583814026544128883524142935885556285226523800663219926700670232718681491837808994609035273757445059726721574125073115042796576956435011283050157789230273449900923115496937054372139422011555436529378285781289939847917463459666817595053796212086444554277915597950112372943539483318864468925197181183358767173251527979338685727912402338859871908435869544592539917176121848735106892593405555371637828225803182306871445258951024151643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9d031a564a3683e79e67601926dc70341f77e6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatactivity-uat.greateasternlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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