digiwork.lta.gov.sg

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:c0:a9:9f:3a:38:cb:c2:30:da:f2:ed:d6:ea:21:62 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digiwork.lta.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c0:a9:9f:3a:38:cb:c2:30:da:f2:ed:d6:ea:21:62
Serial Number (int): 2329589335143252316034186033968587106
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: aa:9f:a8:fc:09:0a:52:b1:ab:75:b5:3a:29:af:01:2e:cd:30:b7:54
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): be:a2:20:37:e3:ca:af:9b:00:3e:9c:08:72:50:cd:06:a6:61:a2:42
Fingerprint (sha256): 13:9b:7b:9d:71:42:28:a4:83:1d:a3:d1:ea:5f:ea:54:59:43:e2:11:bd:94:ee:50:c2:cc:9e:9e:45:62:9e:2f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate digiwork.lta.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digiwork.lta.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digiwork.lta.gov.sg

Other certificates including the domain name lta.gov.sg

(limited to 100 certificates)
ca.gccu.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
datamall.lta.gov.sg
ocoe.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
vrl-ilink.lta.gov.sg

lta.gov.sg
vrl.lta.gov.sg
erp.lta.gov.sg
vrl.lta.gov.sg
portal.insight.lta.gov.sg
ocoe.lta.gov.sg
surveys.lta.gov.sg
ivepintrauat.lta.gov.sg
ocoe.lta.gov.sg
ocoe.lta.gov.sg
efms-uat.sso.gccu.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
ocoe.lta.gov.sg
onemotoring.lta.gov.sg
ocoe.lta.gov.sg
*.insight-uat.lta.gov.sg
vrl.lta.gov.sg
prompt.lta.gov.sg
vrluat.lta.gov.sg
*.insight-uat.lta.gov.sg
digiwork.lta.gov.sg
prompt-uat.lta.gov.sg
lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prodintrawebbi.erp2.lta.gov.sg
ignite.lta.gov.sg
*.insight.lta.gov.sg
ltalinkuat.vrl.lta.gov.sg
ltalink.vrl.lta.gov.sg
gateway.ccrsp.lta.gov.sg
*.insight-uat.lta.gov.sg
testparweb01.erp2.lta.gov.sg
gateway.ccrsp.lta.gov.sg
prompt.lta.gov.sg
prompt-uat.lta.gov.sg
insight-vdi.lta.gov.sg
sslcertificate5.queue-it.net
fmw.ccrsp.lta.gov.sg
kibana.ignite.lta.gov.sg
surveys.lta.gov.sg
prompt-api.gccu.lta.gov.sg
lta.gov.sg
kibana.ignite-uat.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
prompt.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
surveys.lta.gov.sg
datamall.lta.gov.sg
ltalink.vrl.lta.gov.sg
prompt.lta.gov.sg
prodparweb.erp2.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
careers.lta.gov.sg
gateway.ccrsp.lta.gov.sg
fmw.ccrsp.lta.gov.sg
*.insight.lta.gov.sg
surveys.lta.gov.sg
websvc.efms.lta.gov.sg
fmw.ccrsp.lta.gov.sg
cagw.gccu.lta.gov.sg
gateway.ccrsu.lta.gov.sg
palsuat.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
uat.eps.lta.gov.sg
prompt-uat.lta.gov.sg
gateway.ccrsu.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
surveys.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
erp.lta.gov.sg
fmw.ccrsu.lta.gov.sg
app.safejourney.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prompt.lta.gov.sg
gateway.ccrsp.lta.gov.sg
ivepintrauat.lta.gov.sg
gateway.ccrsp.lta.gov.sg
vivr-uat.lta.gov.sg
vrluat.lta.gov.sg

Certificate

The complete raw certificate details for digiwork.lta.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CSXQS4+ypJeEzqKs8vv
Mu9X2v7xH2bNP9WWTyJkHwlgYzkFTp+FJTZirh8JG1PLQQpIDRfJhyak9z56qV1/
gUwUQ7ztPp2ETkUCEX60ChXL10/dFXjXvuzUKg8TNIg+Ux45krKUwNrslD1HQUk4
c31nKPVbeoyw9jwSJzI5WGDFdR7pNQS9ihLU86mBQDOS3VWqh3fWPJhjatzqXoVd
UvPkaUnMrZ86MRLn6epjoaJg/pK5Ra9X075+sSa3VoIgEVNG3FwrIPGX+bGMm+mg
W9mpj5n5JyptbP3ilgt7t2LdyeOqqRFKmgONfoPompCJwb5SGdL3xXB8lrlo8MXS
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2329589335143252316034186033968587106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digiwork.lta.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30820190026592439670979779151650639716102554352764154728154670014586054072429285416815379501020290969845277473952938440033960123368208535264196148732631930061180500490696700817850758381328669756912851585560260993116417654706068162349425600607696490152742457672271158270174444145547953096694462828454712672928220275962161897962625306565238290219090695602456895880288842915018876642416540413389154836400546815532682843054488901885108821947814496447010661465924806746720040584255441136314984785340026317825858976098711936019080336952656725028339231617095497421079657914039843500797929593078000048138487513686694898815727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa9fa8fc090a52b1ab75b53a29af012ecd30b754
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiwork.lta.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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