sift.bii.a-star.edu.sg

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number be:2b:66:ef:ba:24:84:64 was issued on by Starfield Technologies, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sift.bii.a-star.edu.sg

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): be:2b:66:ef:ba:24:84:64
Serial Number (int): 13703159471011038308
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 8d:c5:9b:06:28:a2:c7:ae:94:f7:bb:a1:cc:e6:42:9e:06:52:c9:57
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): c9:25:7c:fe:0d:ae:fe:09:53:df:d1:01:32:63:fc:74:08:0b:5a:f6
Fingerprint (sha256): 0f:fd:89:5e:52:66:50:7a:57:f3:14:c9:2a:37:bd:93:86:89:97:36:67:bd:ea:3a:e5:7c:7e:7c:dc:5e:89:4c

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-646.crl

Check the revocation status for certificate sift.bii.a-star.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sift.bii.a-star.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sift.bii.a-star.edu.sg

Other certificates including the domain name a-star.edu.sg

(limited to 100 certificates)
attach.ibn.a-star.edu.sg
vps11.dpo.a-star.edu.sg
securenet.imcb.a-star.edu.sg
www.brc.a-star.edu.sg
incapsula.com
officeconnect.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
owa2k3.ibn.a-star.edu.sg
edocs.scei.a-star.edu.sg
ns6a.aci.a-star.edu.sg
gwbti.bmsi.a-star.edu.sg
disco.bii.a-star.edu.sg
springer2.map.fastly.net
www.research.a-star.edu.sg
ASTAREXPEDGE.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
asapmbpro01.a-star.edu.sg
incapsula.com
recruit.a-star.edu.sg
vpn.acrc.a-star.edu.sg
*.ejproxy.a-star.edu.sg
incapsula.com
ns0imap1d.aci.a-star.edu.sg
aci.a-star.edu.sg
www.a-star.edu.sg
git.i2r.a-star.edu.sg
dpo.a-star.edu.sg
*.gis.a-star.edu.sg
cloud.a-star.edu.sg
incapsula.com
incapsula.com
bmsismtp04.bmsi.a-star.edu.sg
springer2.map.fastly.net
*.springer.com
ns11-afs56.fusionfest.a-star.edu.sg
*.imcb.a-star.edu.sg
wildcard.gw18-226-ext.dpo.a-star.edu.sg
wireless.ibn.a-star.edu.sg
allercatpro.bii.a-star.edu.sg
mail2.ime.a-star.edu.sg
itssnwbpise.a-star.edu.sg
oar.a-star.edu.sg
edocs.scei.a-star.edu.sg
incapsula.com
*.a-star.edu.sg
springer2.map.fastly.net
*.bii.a-star.edu.sg
webmail.ibn.a-star.edu.sg
extranet.scei.a-star.edu.sg
ns11mailadmin.fusionfest.a-star.edu.sg
skyappnet.scei.a-star.edu.sg
wildcard.dpo.a-star.edu.sg
p61lab.ns6.fusionfest.a-star.edu.sg
springer2.map.fastly.net
apps21b.ns0.fusionfest.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
springer2.map.fastly.net
securenet.imcb.a-star.edu.sg
eprs.a-star.edu.sg
support.a-star.edu.sg
webmail.ibn.a-star.edu.sg
epprd06.a-star.edu.sg
careers.a-star.edu.sg
ns6-ghcpi.aci.a-star.edu.sg
*.gis.a-star.edu.sg
ns8survey.aci.a-star.edu.sg
sift.bii.a-star.edu.sg
lab.a-star.edu.sg
edocs.scei.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
prdap03.a-star.edu.sg
wildcard.gw68-220-ext.dpo.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
fusionfest.a-star.edu.sg
mail.scei.a-star.edu.sg
justattach.imcb.a-star.edu.sg
webmail.gis.a-star.edu.sg
incapsula.com
ku.a-star.edu.sg
appsvc.a-star.edu.sg
incapsula.com
incapsula.com
*.ejproxy.a-star.edu.sg
incapsula.com
kmprdqp1.simtech.a-star.edu.sg
repo.simtech.a-star.edu.sg
support.acrc.a-star.edu.sg
*.a-star.edu.sg
ja-ns2.dpo.a-star.edu.sg
vpngw.a-star.edu.sg
edocs.scei.a-star.edu.sg
core.i2r.a-star.edu.sg
selfservice.a-star.edu.sg
*.ejproxy.a-star.edu.sg
researchers.a-star.edu.sg

Certificate

The complete raw certificate details for sift.bii.a-star.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKkMg4+2+kxn8SVReR8I
wS+nnM7l0OU8QRYFlP7hrsPoEL087BXLOwUsHy2Ms1KxFpd8yoC+ckCcjIygnPXv
cwir5E+po0eqeFGALVmIWoujdQFSeUkrTZaV1uHwyQA3lrEhe3J7bRCADd2JiWpB
Vo5cuheDUf9kYADv3ihN659hncq9qkjHe6qVpQwpqy0cAAFJ6g4C3z62C5CFR4o9
baFuwW8+o33raS7myE5AUM47qlGpyk2KFGO2SBq/w1YN6Jfh864+YyKxKZ1MYLRJ
WJXQPfrfbtii3nwlMLHA2W0x88DA0g3j9mQTJyoLLPyMK6FjH1PNAK5XLJcrrVd8
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13703159471011038308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 18:16:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-21 18:16:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sift.bii.a-star.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19776536685560986326720863957333093596760842767337362976729135963145096024723523983086486246947993827459466673773888425005224249628228035063251271822853773184902169381346772432134387186983449572595169989290536550551984609248202072916823292963536808659191771569900956616963130732567385940116665910704341043953290827943492760671585688150067616807857819025464187434121733586641684801757753367905668504833931666037520641268171183629979466922175703508477732764379997952950740488945476709067317156476555966652141654047639046676610190380452142933581796074686424484061093884114752393736991440545274023854828429778932928576671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-646.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.bii.a-star.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8dc59b0628a2c7ae94f7bba1cce6429e0652c957
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a99fe78e3c7c163552cb7084bf989c5c13280b784450374736d0ee3246386d67742a0107eb6a43b525c89d61b603f7c7e32a32b7cdeb620167345f99777fc528604c05061036a056f1cbe571e378d70bb28dd65ebf1dd3979c42c5a458ec7a3f33c0db9885a9881c0f240dc87d44cf5a427da36e7848711fa3efcdc5cdcc15fd7ecec4e6c747a279944ed159167a7cc422caee20612e883af5b4ac76a1f48809605288d1c42fb02b42382c8ea1398ecaa45f38d54752671434d0ba86f5483aae811adaf6f8eff8172b659dfd6a9a83297b6e3d3761cc360095cae6137a7c6ac082dbd5cf724908c80c73f85dc753c2aee6f537f4d2f1e8e45bb0ae04dedb612