uobtacns.uobgroup.com

- United Overseas Bank Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 8f:0e:bd:23:36:d7:8a:d9:e7:5c:c2 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

United Overseas Bank Limited

Organization: United Overseas Bank Limited
State / Province: Singapore
Locality: Singapore
Country: SG

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 8f:0e:bd:23:36:d7:8a:d9:e7:5c:c2
Serial Number (int): 172945994307734509552360642
Serial Number lenght: 88 bits, 11 octets

SubjectKeyId: 7d:77:c6:81:f1:55:01:f8:f8:50:65:d8:f8:54:9b:19:ff:e3:1e:c4
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 1c:35:2b:73:fa:90:40:7e:bb:e9:85:8f:6b:2b:dd:b1:7b:69:79:65
Fingerprint (sha256): 1b:34:25:36:99:4e:38:36:0d:4d:20:45:00:19:37:bd:1e:bb:50:ad:d8:b7:9a:59:1f:26:b4:97:b4:b8:39:c3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate uobtacns.uobgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uobtacns.uobgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uobtacns.uobgroup.com

Other certificates including the domain name uobgroup.com

(limited to 100 certificates)
hk.bibplus.uobgroup.com
sg.bibplus.uobgroup.com
hk.bibplus.uobgroup.com
uobt3ds.uobgroup.com
fatca-prod-sg.sg.uobgroup.com
api-sign-uat.uobgroup.com
infov.uobgroup.com
uobs-cmp.uobgroup.com
u-uobs3dsg2.uobgroup.com
hk.bibplus.uobgroup.com
cn.bibplus.uobgroup.com
u-www.uobgroup.com
u-uobsacns.uobgroup.com
UOBSLTA.UOBGROUP.COM
uobsacns.uobgroup.com
uniservices1.uobgroup.com
uniservices1.uobgroup.com
info5.uobgroup.com
uobt3ds.uobgroup.com
uniservices2.uobgroup.com
ov.bibplus.uobgroup.com
bizhub-cmpsg.uobgroup.com
u-uniservices1.uobgroup.com
uobsacns.uobgroup.com
vn.uobsme.uobgroup.com
uniservices2.uobgroup.com
uobm3ds.uobgroup.com
www.uobgroup.com
uobslta.uobgroup.com
u-uobtacns.uobgroup.com
uobm3ds.uobgroup.com
UOBgroup.com
hk.bibplus.uobgroup.com
info51.uobgroup.com
uobi3dsg2.uobgroup.com
tryapi-uat.uobgroup.com
www.uobgroup.com
api-encryption2-ec.uobgroup.com
hk.bibplus.uobgroup.com
uobt3ds.uobgroup.com
ov.bibplus.uobgroup.com
uobtacns.uobgroup.com
uobi3ds.uobgroup.com
u-www.uobgroup.com
api-cob.uobgroup.com
fatca-prod-mm-umy.uobgroup.com
uniservices.uobgroup.com
UOBgroup.com
wam-uat.uobgroup.com
u-infinity.uobgroup.com
api-transport-uat.uobgroup.com
uobm3ds.uobgroup.com
ov.bibplus.uobgroup.com
uniservices2.uobgroup.com
mdsoi.uobgroup.com
ov.bibplus.uobgroup.com
www.uobgroup.com
u-myinfo.uobgroup.com
hk.bibplus.uobgroup.com
uniservices1.uobgroup.com
uniservices.uobgroup.com
cn.bibplus.uobgroup.com
cn.bibplus.uobgroup.com
infou.uobgroup.com
uobt3ds.uobgroup.com
careers.uobgroup.com
uob3ds.uobgroup.com
uobsacns.uobgroup.com
api-encryption1-ec.uobgroup.com
u-myinfo.uobgroup.com
hk.bibplus.uobgroup.com
th.bibplus.uobgroup.com
uniservices2.uobgroup.com
uobt3ds.uobgroup.com
info51.uobgroup.com
uobt3ds.uobgroup.com
www.uobgroup.com
www.uobgroup.com
u-uobstkm.uobgroup.com
hk.bibplus.uobgroup.com
uniservices.uobgroup.com
my.uobsme.uobgroup.com
hmssf.uobgroup.com
cn.bibplus.uobgroup.com
ov.bibplus.uobgroup.com
my.infinity.uobgroup.com
uobtacns.uobgroup.com
www.uobgroup.com
cn.bibplus.uobgroup.com
uobm3ds.uobgroup.com
uobgroup.com
fatca-prod-mm-umy.uobgroup.com
sg.bibplus.uobgroup.com
uniservices7.uobgroup.com
sg.bibplus.uobgroup.com
uob3ds.uobgroup.com
www.uobgroup.com
sg.bibplus.uobgroup.com
ApplePayClient.qa.uobgroup.com
bibplus.uobgroup.com

Certificate

The complete raw certificate details for uobtacns.uobgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5kb6SxVvv/Vj742XYpz
NWsP7MVLIHn/ZCv/wbHaIIIBy3XgXhvsvw5pECVO0n6LI9N9jzj56iN4WFwvHl8k
0hjSAdl1UH423YZBqpK46i7EkECf7Cb57ElEzSTn1yHL5/vxCUx4IMyLffGsXuft
UHl+W0hWVp3vzrJRhouqj8LObDH+juJggpWJvL0+76N5IlDnwooRW2U/llWKV7BY
Q+6/7YAfPoTP4M88lvkLWBypb1haCNPrK1dtcADx9TR+Djw5kPnoIjmS+Z2jKxXR
+H3a/7Dwh7hIDRY4/rHtigZKkCUTumpdtKuG+O04MLf27Pk9h2fCwlyMlVqSqj2O
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 172945994307734509552360642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 02:12:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-08 02:06:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Overseas Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uobtacns.uobgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25196923563262859897107655012493614383829148742505267380748690795689452101964809175880628529033167142410700548214192844644494988449180716924304545303679021277880456101334248749991369874537044518296204219238907182085176614232585771447865085387097903359603778979280860988282320390079358332820200380610896135158779713719495482697439042421528454458721193298369359131171869791422287729768650690916267454798511854866838534793415211639823136110496048136366854943964674349534063949973958138746565029106673913143543362676306468424335240283373910610774813485410973685586819519686185486451533353024297054982454030368076145200761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uobtacns.uobgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d77c681f15501f8f85065d8f8549b19ffe31ec4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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