www.a-star.edu.sg

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:c5:be:54:43:8c:2c:fd:1c:16:9d:fb:5a:74:14:64 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.a-star.edu.sg

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:be:54:43:8c:2c:fd:1c:16:9d:fb:5a:74:14:64
Serial Number (int): 5014426802381411403068480180488246372
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 33:54:92:07:97:2f:1c:ad:d8:05:95:01:1f:ff:7c:17:b1:cb:db:7b
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 47:3c:b3:95:91:98:9d:fb:7f:19:ce:8f:32:ae:e4:11:22:b8:b6:c9
Fingerprint (sha256): 16:8f:b1:fc:b3:de:fa:2f:42:72:a4:6e:3a:96:8d:bd:c3:98:f7:37:e0:9d:b7:de:93:3d:c7:ce:b3:3a:57:43

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.a-star.edu.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.a-star.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.a-star.edu.sg
a-star.edu.sg

Other certificates including the domain name a-star.edu.sg

(limited to 100 certificates)
attach.ibn.a-star.edu.sg
vps11.dpo.a-star.edu.sg
securenet.imcb.a-star.edu.sg
www.brc.a-star.edu.sg
incapsula.com
officeconnect.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
owa2k3.ibn.a-star.edu.sg
edocs.scei.a-star.edu.sg
ns6a.aci.a-star.edu.sg
gwbti.bmsi.a-star.edu.sg
disco.bii.a-star.edu.sg
springer2.map.fastly.net
www.research.a-star.edu.sg
ASTAREXPEDGE.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
asapmbpro01.a-star.edu.sg
incapsula.com
recruit.a-star.edu.sg
vpn.acrc.a-star.edu.sg
*.ejproxy.a-star.edu.sg
incapsula.com
ns0imap1d.aci.a-star.edu.sg
aci.a-star.edu.sg
www.a-star.edu.sg
git.i2r.a-star.edu.sg
dpo.a-star.edu.sg
*.gis.a-star.edu.sg
cloud.a-star.edu.sg
incapsula.com
incapsula.com
bmsismtp04.bmsi.a-star.edu.sg
springer2.map.fastly.net
*.springer.com
ns11-afs56.fusionfest.a-star.edu.sg
*.imcb.a-star.edu.sg
wildcard.gw18-226-ext.dpo.a-star.edu.sg
wireless.ibn.a-star.edu.sg
allercatpro.bii.a-star.edu.sg
mail2.ime.a-star.edu.sg
itssnwbpise.a-star.edu.sg
oar.a-star.edu.sg
edocs.scei.a-star.edu.sg
incapsula.com
*.a-star.edu.sg
springer2.map.fastly.net
*.bii.a-star.edu.sg
webmail.ibn.a-star.edu.sg
extranet.scei.a-star.edu.sg
ns11mailadmin.fusionfest.a-star.edu.sg
skyappnet.scei.a-star.edu.sg
wildcard.dpo.a-star.edu.sg
p61lab.ns6.fusionfest.a-star.edu.sg
springer2.map.fastly.net
apps21b.ns0.fusionfest.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
springer2.map.fastly.net
securenet.imcb.a-star.edu.sg
eprs.a-star.edu.sg
support.a-star.edu.sg
webmail.ibn.a-star.edu.sg
epprd06.a-star.edu.sg
careers.a-star.edu.sg
ns6-ghcpi.aci.a-star.edu.sg
*.gis.a-star.edu.sg
ns8survey.aci.a-star.edu.sg
sift.bii.a-star.edu.sg
lab.a-star.edu.sg
edocs.scei.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
prdap03.a-star.edu.sg
wildcard.gw68-220-ext.dpo.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
fusionfest.a-star.edu.sg
mail.scei.a-star.edu.sg
justattach.imcb.a-star.edu.sg
webmail.gis.a-star.edu.sg
incapsula.com
ku.a-star.edu.sg
appsvc.a-star.edu.sg
incapsula.com
incapsula.com
*.ejproxy.a-star.edu.sg
incapsula.com
kmprdqp1.simtech.a-star.edu.sg
repo.simtech.a-star.edu.sg
support.acrc.a-star.edu.sg
*.a-star.edu.sg
ja-ns2.dpo.a-star.edu.sg
vpngw.a-star.edu.sg
edocs.scei.a-star.edu.sg
core.i2r.a-star.edu.sg
selfservice.a-star.edu.sg
*.ejproxy.a-star.edu.sg
researchers.a-star.edu.sg

Certificate

The complete raw certificate details for www.a-star.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteyI7Q8KzaGkGq+4F65P
lmcfQlW0DDdgtYpggciP3jvVgmy5RZwTUrzXbhxRM3ZJ3EiYqj5WHS5ytQ1nvQbK
BoWm7BVSrRD4bYsgmiRoz0pEWG8EmXEEtZF7Q8WCw08fWMF4m2vgbmbyZFXcGoIY
mTgLRycRa2h1RFNHrlnxuxFDVNi7moVVKQRm1OIOW3HBK1n02BsYgCyPIjKIfoXZ
BvbnbQHukbwfSwM448GS16nSfiNikcaFQ8GrRNT4ZT2kZ7zd/ajaIMiTRBXtQmnD
7mwJpuouIm0lOiod5RNS4Qk5VS2kRR4BjMYK49bu7ghChEUY3Bfntpv4mXUDmsYx
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5014426802381411403068480180488246372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.a-star.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22965772889108311892523002952447480799825765835445220743151349115840766120289638370955528428692044233692041219934841984159453952746769027106558354688334322667330399308080319535143975749324289227855905654715464534613598209708258563102371633727998826179202100861828111012713166231666617040807033892967615558241438756625167595712302637245986595716955112273266804805823560410375027774642608133299242027045863905135676737655081777512035887624682725315662476153808116410927752763555770052181474221479007704505631746290157181236098127469865442737216049076553919798203353245759136339264955982682005026715023815106235243835767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33549207972f1cadd80595011fff7c17b1cbdb7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-star.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-star.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185e79a8a9c0000040300473045022100cb1515fc0461213588eaf3559b095fdaafab34f7fd8d8cf8a71657218a878d8d02204e74467272ef00a351ef7cedf74da4736fb86a9bf770050a2f3feb76402923fe00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185e79a8b180000040300473045022100894757850801ec14decba475b1d3c946ed1e751de23b69fb8119da2c413a80c5022020ef93be99bad0ccf77e0abe486b8e0c5b1865f16a709c993d71e78543c02a4700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000185e79a8a820000040300473045022100fbed4fdea0179c58080c833102561a81e663605d13ab8fc222e6d9d8c740a4e602205139a386c70d06825d5877931ffdd826f2c789f302084ef115cec4188231f65a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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