proinvest.com.sg

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:c6:81:94:7e:10:7b:19:4b:3e:e9:91:55:2a:3d:a4 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=proinvest.com.sg

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:c6:81:94:7e:10:7b:19:4b:3e:e9:91:55:2a:3d:a4
Serial Number (int): 20969122910385592508884132564338097572
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d3:7f:72:47:6b:96:48:5a:f0:be:63:5d:53:8b:a8:91:7d:59:68:e9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ad:71:f8:50:ed:42:f8:7e:6c:c4:ad:0e:31:a5:25:d5:7e:7c:e0:69
Fingerprint (sha256): 07:99:dd:06:0b:cc:15:52:26:1c:57:7d:3a:8a:64:9c:b8:3d:97:83:5c:f2:3f:bf:99:e4:82:6d:4f:f2:05:79

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate proinvest.com.sg

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proinvest.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proinvest.com.sg
protectionavivacontreleau.ca
roadwingsinsurance.com
roadwingsinsurance.ca
road-wings-insurance.ca
qualtrics.at.aviva.com
support-logmeininc.at.aviva.com
saye.at.aviva.com
archergrc.aviva.com
protectionetancheaviva.ca
protectionavivacontreleau.com
thirdparty.avivabrand.com
riskasyst.ie
protectionetancheaviva.com
qa.avivaassurance.ca
road-wings-insurance.com
practice-autoenrolmentmanager.co.uk
road-wings.ca

Other certificates including the domain name proinvest.com.sg

(limited to 100 certificates)
gi.proinvest.com.sg
aem-staging.proinvest.com.sg
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com

vue.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
gi.proinvest.com.sg
vue.proinvest.com.sg
dn.proinvest.com.sg
proinvest.wildcrayon.com
docushare.proinvest.com.sg
iap.proinvest.com.sg
iau.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
docushare.proinvest.com.sg
proinvest.wildcrayon.com
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
cert01.as.aviva.com
proinvest.wildcrayon.com
proinvest.wildcrayon.com
dn.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
iap.proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
dn.proinvest.com.sg
gi.proinvest.com.sg
dn.proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
info.proinvest.com.sg
docushare.proinvest.com.sg
*.proinvest.com.sg
ssp.proinvest.com.sg
proinvest.wildcrayon.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
vueint-prod.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
gi.proinvest.com.sg

Certificate

The complete raw certificate details for proinvest.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vzcu1/X0Dt6SrWbES9P
pf9YMVz9wpNcASdUUMgnYAPDjRIzjLlB0Pr8mtFkGLzJNa251oulzLZ4eMw7nYbN
W95Cbk5DRbXXx3DfqWTo5kBXDT2pNl59KKqVrtpUW0P8Xv7BcLbs37KFlgmZueUT
tc8lTT8pTNQQFpS6zjLuwGpfmY8mDye14nUaE4QGzbtCmJQxoIjQyI9RcUVSrd8y
yc9whvDZxfizN1LwFsvMaRQb91/3j0xeThJv3R+HxR8yD6RrcrqAo7hUomnA0jKr
lex44fKjucszuwPdvzYPljX2/yxjbRwUFOb+mf7lQFL+qBn4Uq9ScjIvIvdtXLwZ
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20969122910385592508884132564338097572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proinvest.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27644641497536337971856254142989178710644396923836912921019591495694658706480455602111841557375659622331136090374101464560846973116534209843373778407783972368087021592686667615354880308986877430422535062370089940810648215925811895700166748211099341445862999920833711025603794291567925536840129887189197444133305806690654289589055809243820883241357992081252935790376959696585667215338641768000491108403311548535542990385706246030999969597239610537238201969048315873455130600654194078835194393724564081260639984296915155157410363720853993987194379968672962074731808120933915967257889244769495537967686568126562871023953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d37f72476b96485af0be635d538ba8917d5968e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proinvest.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualtrics.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-logmeininc.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saye.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archergrc.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdparty.avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice-autoenrolmentmanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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