*.sim.edu.sg

- Singapore Institute of Management -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5e:d1:4e:47:83:43:11:b3:41:0c:ba:31 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Singapore Institute of Management

Organization: Singapore Institute of Management
State / Province: Singapore
Locality: Singapore
Country: SG

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:d1:4e:47:83:43:11:b3:41:0c:ba:31
Serial Number (int): 29344626083268810127344187953
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ef:7c:77:2b:9a:95:f4:5e:eb:24:92:cc:62:d8:f8:56:79:12:98:f6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 3c:47:be:c1:58:a5:45:6a:f9:aa:d3:5c:78:2f:f2:f6:26:69:30:1e
Fingerprint (sha256): 1e:1c:82:d6:38:9c:02:8c:67:a5:fd:63:77:6f:8b:4b:6c:97:9f:76:62:8d:66:c9:22:39:21:05:77:fc:2e:a8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.sim.edu.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sim.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sim.edu.sg
sim.edu.sg

Other certificates including the domain name sim.edu.sg

(limited to 100 certificates)
vpn.sim.edu.sg
www10.sim.edu.sg
simpolicysrv-mh.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
hosting.bluera.com
*.sim.edu.sg
*.libproxy.sim.edu.sg
*.sim.edu.sg
mail.sim.edu.sg
*.sim.edu.sg
www8.sim.edu.sg
*.sim.edu.sg
www14.sim.edu.sg
mail.sim.edu.sg
simpolicysrv-mh.sim.edu.sg
onlinelearn.sim.edu.sg
m360.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
*.ezproxy.sim.edu.sg
survey.sim.edu.sg
www11.sim.edu.sg
hosting.bluera.com
heartbeat.sim.edu.sg
www7.sim.edu.sg
sim.edu.sg
mail.sim.edu.sg
adfs.sim.edu.sg
www10.sim.edu.sg
*.sim.edu.sg
hosting.bluera.com
libguides.sim.edu.sg
*.sim.edu.sg
www1.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
www13.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
pd.sim.edu.sg
*.sim.edu.sg
hosting.bluera.com
heartbeat.sim.edu.sg
libguides.sim.edu.sg
*.sim.edu.sg
esourcing.sim.edu.sg
SIMPOLICYSRV.sim.edu.sg
hosting3.bluera.com
*.sim.edu.sg
onlinelearn.sim.edu.sg
emodule.sim.edu.sg
www10.sim.edu.sg
*.sim.edu.sg
SIMPOLICYSRV.sim.edu.sg
hosting.bluera.com
*.sim.edu.sg
san-4-s12.tlsprovisioning.exacttarget.com
simpolicysrv.sim.edu.sg
libguides.sim.edu.sg
san-4-s12.tlsprovisioning.exacttarget.com
esourcing.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
*.libproxy.sim.edu.sg
*.sim.edu.sg
simpolicysrv-mh.sim.edu.sg
PD.SIM.EDU.SG
eglobal.sim.edu.sg
libguides.sim.edu.sg
sipexternal.sim.edu.sg
www15.sim.edu.sg
*.sim.edu.sg
hosting3.bluera.com
gcs.sim.edu.sg
www20.sim.edu.sg
heartbeat.sim.edu.sg
san-4-s12.tlsprovisioning.exacttarget.com
heartbeat.sim.edu.sg
onlinelearn.sim.edu.sg
*.ezproxy.sim.edu.sg
www3.sim.edu.sg
hosting.bluera.com
*.sim.edu.sg
simpolicysrv-mh.sim.edu.sg
hosting.bluera.com
simpolicysrv.sim.edu.sg
*.sim.edu.sg
simconnect.sim.edu.sg
www12.sim.edu.sg
*.sim.edu.sg
*.sim.edu.sg
hosting.bluera.com
*.sim.edu.sg
pd.sim.edu.sg
simpolicysrv.sim.edu.sg
libguides.sim.edu.sg
*.sim.edu.sg

Certificate

The complete raw certificate details for *.sim.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpIhKiKJy7I6HmgqfVml
TmDoUojp6gadjE8ZaCVZX5uMHn4zQQjMpi75LY75NcAKRRrSGFcl2XBmVUHpOGBX
Mu2eq0cfCbPB+bb+4586GkJoYnQSNd0CGG7mkwasGoV1Hxi0k8XuEsy1X6gNsXr5
C5qbovuB39YkuchdEuv/VRGDBMhMOeI+PedHozE0FlvjELPcAw11dGoNOBxLmWJ9
0pIkaJKUww8oz0t2HecvOiKeiQZslYz7APdWXm/eZlD/VM0sNoqy/VJ+0M7SD9aE
39TsCOBn5jPhQEucEeqxqjaHybSfJkVWiEneUO5jFGNUq5JisGHmqcoXp9pb2DR1
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29344626083268810127344187953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 02:52:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-05 02:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore Institute of Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sim.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23047430670204143687989341832737613848761738517257524316809570823449752155893733948060663751804163771923299245801226015878079807711172250060383788726196857175771835557353840332962310428317667448225700771508334819531478798317088599583371413983535184374092642630482030116613158896974253865066756374693547568518715427272116541181387437589714813558320456505731058447704348663222334299384276592703352789629964309805591331968251175489029525646027306858040544335503859039930480804279907799447009445309861439961118740843729344877498763605819806570507112513436792499917998879063543157905119697664745506468642188265423327491479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sim.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef7c772b9a95f45eeb2492cc62d8f856791298f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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