hk.bibplus.uobgroup.com

- United Overseas Bank Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3b:9c:f3:49:14:63:30:44:a5:4d:ca:3c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

United Overseas Bank Limited

Organization: United Overseas Bank Limited
State / Province: Singapore
Locality: Singapore
Country: SG

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:9c:f3:49:14:63:30:44:a5:4d:ca:3c
Serial Number (int): 18449356890455966885442603580
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 83:11:dc:9a:d0:ff:b6:b9:ac:39:bb:c3:fc:d5:4a:3d:89:bb:8b:45
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 05:46:bf:55:19:71:85:01:de:96:47:e1:e3:28:0f:88:90:28:6e:f7
Fingerprint (sha256): 0c:06:5d:22:e2:8b:ff:81:e8:19:ff:51:81:75:25:7a:d4:21:76:49:8d:02:f0:28:b9:a3:92:28:fe:84:ba:63

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate hk.bibplus.uobgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hk.bibplus.uobgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hk.bibplus.uobgroup.com

Other certificates including the domain name uobgroup.com

(limited to 100 certificates)
hk.bibplus.uobgroup.com
sg.bibplus.uobgroup.com
hk.bibplus.uobgroup.com
uobt3ds.uobgroup.com
fatca-prod-sg.sg.uobgroup.com
api-sign-uat.uobgroup.com
infov.uobgroup.com
uobs-cmp.uobgroup.com
u-uobs3dsg2.uobgroup.com
hk.bibplus.uobgroup.com
cn.bibplus.uobgroup.com
u-www.uobgroup.com
u-uobsacns.uobgroup.com
uobsacns.uobgroup.com
uniservices1.uobgroup.com
uniservices1.uobgroup.com
info5.uobgroup.com
uobt3ds.uobgroup.com
uniservices2.uobgroup.com
ov.bibplus.uobgroup.com
bizhub-cmpsg.uobgroup.com
u-uniservices1.uobgroup.com
uobsacns.uobgroup.com
vn.uobsme.uobgroup.com
uniservices2.uobgroup.com
uobm3ds.uobgroup.com
www.uobgroup.com
uobslta.uobgroup.com
u-uobtacns.uobgroup.com
uobm3ds.uobgroup.com
UOBgroup.com
hk.bibplus.uobgroup.com
uobi3dsg2.uobgroup.com
tryapi-uat.uobgroup.com
www.uobgroup.com
api-encryption2-ec.uobgroup.com
hk.bibplus.uobgroup.com
uobt3ds.uobgroup.com
ov.bibplus.uobgroup.com
uobtacns.uobgroup.com
uobi3ds.uobgroup.com
u-www.uobgroup.com
api-cob.uobgroup.com
uniservices.uobgroup.com
UOBgroup.com
wam-uat.uobgroup.com
u-infinity.uobgroup.com
api-transport-uat.uobgroup.com
uobm3ds.uobgroup.com
ov.bibplus.uobgroup.com
uniservices2.uobgroup.com
mdsoi.uobgroup.com
ov.bibplus.uobgroup.com
www.uobgroup.com
u-myinfo.uobgroup.com
hk.bibplus.uobgroup.com
uniservices1.uobgroup.com
uniservices.uobgroup.com
cn.bibplus.uobgroup.com
cn.bibplus.uobgroup.com
infou.uobgroup.com
uobt3ds.uobgroup.com
careers.uobgroup.com
uob3ds.uobgroup.com
uobsacns.uobgroup.com
api-encryption1-ec.uobgroup.com
u-myinfo.uobgroup.com
hk.bibplus.uobgroup.com
th.bibplus.uobgroup.com
uniservices2.uobgroup.com
uobt3ds.uobgroup.com
info51.uobgroup.com
uobt3ds.uobgroup.com
www.uobgroup.com
www.uobgroup.com
u-uobstkm.uobgroup.com
hk.bibplus.uobgroup.com
uniservices.uobgroup.com
my.uobsme.uobgroup.com
hmssf.uobgroup.com
cn.bibplus.uobgroup.com
ov.bibplus.uobgroup.com
my.infinity.uobgroup.com
uobtacns.uobgroup.com
www.uobgroup.com
cn.bibplus.uobgroup.com
uobm3ds.uobgroup.com
uobgroup.com
fatca-prod-mm-umy.uobgroup.com
sg.bibplus.uobgroup.com
uniservices7.uobgroup.com
sg.bibplus.uobgroup.com
uob3ds.uobgroup.com
www.uobgroup.com
sg.bibplus.uobgroup.com
ApplePayClient.qa.uobgroup.com
bibplus.uobgroup.com
infov.uobgroup.com
my.bibplus.uobgroup.com
uobtacns.uobgroup.com

Certificate

The complete raw certificate details for hk.bibplus.uobgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqes3eD1KLQn03j3TGtc/
cdF2ss0xXH9mJyEyPKwHjFrVFyU6GvUtSl1dydQkhg1ULV/TzPo8VkwWmE44hxUK
N7jPBoWSwqpLJDoqQNi7qxq472r6+g4d98HmaVDO37fbMfW7OcyuYaH7kXkKEoil
19UkK++j/r2RKKoOlF/64q65/iQP6vlzKlm9aCxiFF/QP3TjcH/WBTfVo27mgBWZ
n3kV/3gun1B0+UsAbfeQMLoVAyTCFxNgCwaoUK3jitO/K1a1UO/E8tamW2lTfySj
e3w0S1IasQ+Wwx9EcPaV9Yt8DGil9RW7FAZju1CleIZxb+FS+xKg3J6TuR1iivKd
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18449356890455966885442603580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 09:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 09:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Overseas Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hk.bibplus.uobgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21450263206405564650419294418672166158868682098321055072122397759094257252908247968816618691791853300214929903858050946150217319534593795458899476721651600251785264040526906173349201106889963931817253419289901534918453497357090770142480654702227224060358678327706563390599997148102651707887153816869030210869048211028810125452978670828335833182643150441135615558306812309206959465684577764048204172616909864783148558672064083809328121879296931465277826917482428417576558590214402556806242550844326478065707658933753201358406116747872588946504175725177575081056877230926687909046174913556279647313728336192523274984733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.bibplus.uobgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8311dc9ad0ffb6b9ac39bbc3fcd54a3d89bb8b45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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