onelink.libertyinsurance.com.sg

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 1d:ba was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=onelink.libertyinsurance.com.sg,OU=GT65904897+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:ba
Serial Number (int): 7610
Serial Number lenght: 13 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): f6:62:b8:6d:46:e8:df:b7:43:24:02:f4:d2:14:16:67:10:8b:9f:8e
Fingerprint (sha256): 1d:17:c5:e8:a0:05:74:ce:c4:35:c2:b8:73:0c:f0:f2:e0:ba:a3:64:64:68:8a:46:c4:67:f0:50:74:7d:85:c7

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate onelink.libertyinsurance.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onelink.libertyinsurance.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onelink.libertyinsurance.com.sg

Other certificates including the domain name libertyinsurance.com.sg

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
digital.libertyinsuranceasia.com
www.libertyseguros.com.br
www.libertyseguros.com.br
www.libertyseguros.com.br
act-dmz.libertyseguros.com.br
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
libertyinsurance.com.sg
nonprod-corp.libertyinsurance.com.hk
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
filetransfer.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
digital.libertyinsurance.com.sg
online.libertyinsurance.com.sg
pwkipgf-gflnc02.gfab.lmig.com
filetransfer.libertyinsurance.com.sg
nonprod-easycare.libertymedicalinsurance.com
mail-na.lm.lmig.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymutual.com
sg-webmail.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
www.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
libertymutual.com
digital.libertyinsuranceasia.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
act-dmz.libertyseguros.com.br
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
brmspolicy-uat.libertyinsurance.in
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
act-dmz.libertyseguros.com.br
libertymutual.com
uat.mediedge.com
www.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
www.libertyinsurance.com.sg
act-dmz.libertyseguros.com.br
onelink.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
libertymutual.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
act-dmz.libertyseguros.com.br
pwwipgf-gflnc02.gfab.lmig.com
libertymutual.com
mail-na.lm.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com

Certificate

The complete raw certificate details for onelink.libertyinsurance.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7BI4yuxpWzXPvAdEwNS
6oDzUHUSXdmANiXo7TKYK0peWwRaR15/tKsttvLg4iqnJHE7KOYOnM3Cghfvpb1b
iQYKbjH/z602bnQ0CPX+PjIZT2boL7iHmq2hVotaRhnlaO4oCOT1MB2nDe5FIvGt
7VvArnnoh/wPjqDHnQD8JPfEMwZNaMdNLuZWB2y9zHbe1zfodC2L3BiQVx5ctPCg
7K4nbzT+SzLiA0udt3ovEWAyADYMN24uFus57kdg3orwJX1a/JuWL/u4EjKobQ0K
xQ5xWFHqy21SLOCWCCE+oFBd7+/y6CBDjiZQcer7EyZH3qDH+hxARrJ1WG5nOZtq
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-04 23:12:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-07 22:18:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT65904897'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onelink.libertyinsurance.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17129100403946744449405173104860471442679020390826104642952021541842093002497267378487615149042235293977806552107838494186818930749610861959728233561254918074592864714918776497943548483787365315324753109386403600639690094487341395998577365149672085681475737499698918357114394095058048848411945620209538847280001754418274180508898122180332501169901827115900155009044408833504779830794354783024307075243371892443279605511473667983686287818327678823126144263131172710477829025189815892447038971617771963205031442483823167596714422092779078618739744073126230241107102465725875192675814839316502859830541819955434240043569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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