*.a-star.edu.sg

Issued by GoGetSSL RSA DV CA

About this certificate

This digital certificate with serial number 4c:ec:83:d1:1e:35:50:2f:fb:bd:60:4f:34:c0:22:0c was issued on by GoGetSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.a-star.edu.sg

GoGetSSL

Organization: GoGetSSL
Locality: Riga
Country: LV

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:ec:83:d1:1e:35:50:2f:fb:bd:60:4f:34:c0:22:0c
Serial Number (int): 102249383301960871548629917066997015052
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e3:16:27:45:75:bf:5d:6c:44:1e:82:f6:66:4f:09:57:e3:a1:be:08
AuthorityKeyId: f9:fb:50:c4:8b:67:bb:67:64:fe:83:21:a6:a9:ce:3f:55:84:93:99

Fingerprint (sha1): 46:d8:ab:21:53:e3:12:6b:5f:6e:fa:da:17:2d:ab:53:8f:8b:62:6b
Fingerprint (sha256): 0a:3e:64:7c:17:b7:e4:42:f4:a3:14:cd:7d:b3:e1:a3:b2:13:b7:86:e7:fb:2f:29:29:94:04:1d:85:fc:25:ed

Issuing Certificate URL: http://crt.usertrust.com/GoGetSSLRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GoGetSSLRSADVCA.crl

Check the revocation status for certificate *.a-star.edu.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.a-star.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a-star.edu.sg
a-star.edu.sg

Other certificates including the domain name a-star.edu.sg

(limited to 100 certificates)
attach.ibn.a-star.edu.sg
vps11.dpo.a-star.edu.sg
securenet.imcb.a-star.edu.sg
www.brc.a-star.edu.sg
incapsula.com
officeconnect.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
owa2k3.ibn.a-star.edu.sg
edocs.scei.a-star.edu.sg
ns6a.aci.a-star.edu.sg
gwbti.bmsi.a-star.edu.sg
disco.bii.a-star.edu.sg
springer2.map.fastly.net
www.research.a-star.edu.sg
ASTAREXPEDGE.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
asapmbpro01.a-star.edu.sg
incapsula.com
recruit.a-star.edu.sg
vpn.acrc.a-star.edu.sg
*.ejproxy.a-star.edu.sg
incapsula.com
ns0imap1d.aci.a-star.edu.sg
aci.a-star.edu.sg
www.a-star.edu.sg
git.i2r.a-star.edu.sg
dpo.a-star.edu.sg
*.gis.a-star.edu.sg
cloud.a-star.edu.sg
incapsula.com
incapsula.com
bmsismtp04.bmsi.a-star.edu.sg
springer2.map.fastly.net
*.springer.com
ns11-afs56.fusionfest.a-star.edu.sg
*.imcb.a-star.edu.sg
wildcard.gw18-226-ext.dpo.a-star.edu.sg
wireless.ibn.a-star.edu.sg
allercatpro.bii.a-star.edu.sg
mail2.ime.a-star.edu.sg
itssnwbpise.a-star.edu.sg
oar.a-star.edu.sg
edocs.scei.a-star.edu.sg
incapsula.com
*.a-star.edu.sg
springer2.map.fastly.net
*.bii.a-star.edu.sg
webmail.ibn.a-star.edu.sg
extranet.scei.a-star.edu.sg
ns11mailadmin.fusionfest.a-star.edu.sg
skyappnet.scei.a-star.edu.sg
wildcard.dpo.a-star.edu.sg
p61lab.ns6.fusionfest.a-star.edu.sg
springer2.map.fastly.net
apps21b.ns0.fusionfest.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
springer2.map.fastly.net
securenet.imcb.a-star.edu.sg
eprs.a-star.edu.sg
support.a-star.edu.sg
webmail.ibn.a-star.edu.sg
epprd06.a-star.edu.sg
careers.a-star.edu.sg
ns6-ghcpi.aci.a-star.edu.sg
*.gis.a-star.edu.sg
ns8survey.aci.a-star.edu.sg
sift.bii.a-star.edu.sg
lab.a-star.edu.sg
edocs.scei.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
prdap03.a-star.edu.sg
wildcard.gw68-220-ext.dpo.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
fusionfest.a-star.edu.sg
mail.scei.a-star.edu.sg
justattach.imcb.a-star.edu.sg
webmail.gis.a-star.edu.sg
incapsula.com
ku.a-star.edu.sg
appsvc.a-star.edu.sg
incapsula.com
incapsula.com
*.ejproxy.a-star.edu.sg
incapsula.com
kmprdqp1.simtech.a-star.edu.sg
repo.simtech.a-star.edu.sg
support.acrc.a-star.edu.sg
*.a-star.edu.sg
ja-ns2.dpo.a-star.edu.sg
vpngw.a-star.edu.sg
edocs.scei.a-star.edu.sg
core.i2r.a-star.edu.sg
selfservice.a-star.edu.sg
*.ejproxy.a-star.edu.sg
researchers.a-star.edu.sg

Certificate

The complete raw certificate details for *.a-star.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOlkg9ee48MZnnQskZY2
n9JuyLZKuxDQ0/XfypF3eNp1jev3xKFG6Y3vMAOYei60xmRZMIc7rER2f5dGXWuY
f/KHLvj2SoCKRr643j0YIW1WadljDJ9um8n/KK7q2R2qfXA0sq23jwPx8WnwT592
bT29a+GOVNNop/7CK1WmhXsbkYWeN0LlLmHPw+zy6Y0iTEhb9dQ735DF0pPwHuX+
zmtirOQdmDdEnlUdIvJvBn9accPBcXx/fYlkiuC66rc9P+9egMRe+xqvBT+mKM6C
rbdKhx+KrXJYHFsXMcOzpsqsSJOT6cOUoUZ/O2HzUbQbw9JR7OySeK58btjahfUo
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102249383301960871548629917066997015052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riga'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.a-star.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25362751191865252686520625630128712668929508033953202289923536764038996214344653631222843963741288984638839086252214932198569497829381642632391920656402265085531271128052600204996326674581478622908553181426494797058462212418630863787659344987163885383542158208957226344584193508833020137886823557486304229693353685421695652354179393025271831798176719718250988660493424088204737292707676071157392828936686844540317558814913790698721386303298659674722650845919435637298641983181433994907724602298046539730610756012557754590027581990507853977811436398427140540864100613648082888079913464005610703654399546646844723767423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f9fb50c48b67bb6764fe8321a6a9ce3f55849399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e316274575bf5d6c441e82f6664f0957e3a1be08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.64
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GoGetSSLRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GoGetSSLRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-star.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-star.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189017d586b00000403004830460221008515228340a8bd5e7b3dc86a82f5d13b4070d13419fe69f0802369a8fbec8a14022100e51771c735edec5fbf46089d69391e4bb50a44f9d439a35740879f792b4e9ef4007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189017d58d2000004030046304402207e6c14931e4eccbc2169ccfd31b21e6d63c90e6db656db665591dd13e0ce25fb02203575b249cfd4c7c4bf8c967e331b3683344c0b5c24adc285dfa967ae6b906d38007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189017d589200000403004630440220655c66ae10fad8e45dcf89dc4071d6b50289d06830213ce10c5865cc4c70bb740220262ad201d195af3b674a7731658858ab1258c0d52459585cc2333be0dcab0ab1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095d667c2206e09d56bcccf417c1b9035d271d14e2a3493089301bee65629d2a067c9a191dae07bfa5ae1f644a9aa480ade6c666d67201f42ec805ce23dd9c2ce37faf4c664b103ca002de438d41784c35367c7f18d024f11fd29e0c91559888bc137a6949cbca007421713c9a57773afc26b72f4f0130fab2d65a2a92fcf7d251b484b6a652f847f1c78cbc6ce3091592c5ad04fee5992cad095c0b11cb5ee8889874c8a7ec24725d55086f883716f90e6575c1f8cef00a1c38df50efc161e9ad8c400126024b6a8014ff694dbf42b2e1f4fc15f927ad8b14b569961cdea2b3837aad2baac94e29922f1b95e5790ac633d6f6d9b4363be9bc6b82af2daa51b7f