user.api.um2c.sisgroup.sg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:61:ed:15:ce:1d:22:7f:92:09:09:09:60:f1:0b:39:e1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=user.api.um2c.sisgroup.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:61:ed:15:ce:1d:22:7f:92:09:09:09:60:f1:0b:39:e1
Serial Number (int): 292092436950372431171215681561621267429857
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:5d:d3:0c:af:d2:80:91:6a:f6:77:18:89:0b:64:f0:52:83:34:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:66:39:b9:4e:9c:c6:94:8a:aa:33:66:7f:a9:74:73:6d:dd:0a:50
Fingerprint (sha256): 20:84:ea:cc:6d:8f:53:d6:7e:04:41:d6:9f:c3:e3:2d:c1:02:14:b4:2d:2a:0d:22:1d:34:dd:a6:16:25:05:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate user.api.um2c.sisgroup.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for user.api.um2c.sisgroup.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

user.api.um2c.sisgroup.sg
www.user.api.um2c.sisgroup.sg

Other certificates including the domain name sisgroup.sg

(limited to 100 certificates)
unionpower.homepage.qa.ucentric.sisgroup.sg
homepage.ucentric.sisgroup.sg
api.unionpower.ucentric.sisgroup.sg
peererenergy.uat-homepage.sisgroup.sg
unionpower.ucentric.sisgroup.sg
coppincamps.com
www.peererenergy-qa.ssp.ucentric.sisgroup.sg
dev.anx.sisgroup.sg
workout.engoyan.com
uat-prod-golden.ucentric.sisgroup.sg
unionpower.sisgroup.sg
chatbot.api.sisgroup.sg
jecdev.sisgroup.sg
portal.iswitch.ucentric.sisgroup.sg
ema-unionpower.ucentric.sisgroup.sg
homepage.peererenergy.ucentric.sisgroup.sg
sisgroup.sg
monitor.staging.ucentric.sisgroup.sg
homepage.ucentric.sisgroup.sg
peererenergy.api.qa.ucentric.sisgroup.sg
uat.ucentric.sisgroup.sg
www.peererenergy-uat.ssp.ucentric.sisgroup.sg
admin.staging.kichin.io
homepage.test.ucentric.sisgroup.sg
peererenergy.qa.ucentric.sisgroup.sg
unionpower.sisgroup.sg
*.sisgroup.sg
unionpower.homepage.uat.ucentric.sisgroup.sg
api.staging.ucentric.sisgroup.sg
iswitch.ucentric.sisgroup.sg
unionpower.api.qa.ucentric.sisgroup.sg
dev.api.cmg.sisgroup.sg
sisgroup.sg
api.migration.iswitch.ucentric.sisgroup.sg
unionpower.ucentric.sisgroup.sg
api.unionpower.ucentric.sisgroup.sg
test.ucentric.sisgroup.sg
www.peererenergy-uat.ssp.ucentric.sisgroup.sg
uat-prod-golden.ucentric.sisgroup.sg
staging.iswitch.ucentric.sisgroup.sg
uat.mailbuilder.ucentric.sisgroup.sg
atheneum.sisgroup.sg
user.api.sit.um2c.sisgroup.sg
iswitch.commercial.ucentric.sisgroup.sg
peererenergy.qa.ucentric.sisgroup.sg
homepage.ucentric.sisgroup.sg
projectx.sisgroup.sg
firebase.ucentric.sisgroup.sg
old.hugo.eynard-home.fr
www.peererenergy-uat.ssp.ucentric.sisgroup.sg
peerer.sisgroup.sg
sisgroup.sg
firebase.ucentric.sisgroup.sg
peerer.sisgroup.sg
homepage.qa.ucentric.sisgroup.sg
futa.io
sisgroup.sg
user.api.um2c.sisgroup.sg
uat-golden.ucentric.sisgroup.sg
unionpower.ucentric.sisgroup.sg
api.pdf-generation.um2c.sisgroup.sg
peererenergy.api.qa.ucentric.sisgroup.sg
iswitch.residential.ucentric.sisgroup.sg
qa.mailbuilder.sisgroup.sg
monitor.staging.ucentric.sisgroup.sg
iswitch.ucentric.sisgroup.sg
tms.sisgroup.sg
api.test.ucentric.sisgroup.sg
apiv2.iswitch.ucentric.sisgroup.sg
cmg.qa.sisgroup.sg
uat-prod-golden.api.ucentric.sisgroup.sg
riyapov.sisgroup.sg
dev.pointer.sisgroup.sg
api.migration.iswitch.ucentric.sisgroup.sg
uat.ucentric.sisgroup.sg
hr.sisgroup.sg
uat-prod.ssp.ucentric.sisgroup.sg
api.ut.pdf-generation.um2c.sisgroup.sg
ssp.iswitch.ucentric.sisgroup.sg
unionpower.ucentric.sisgroup.sg
iswitch.commercial.ucentric.sisgroup.sg
peererenergy.uat.ucentric.sisgroup.sg
www.eatism.site
peerer.sisgroup.sg
admin-old.iswitch.ucentric.sisgroup.sg
uat-prod.api.ucentric.sisgroup.sg
portainer.staging.ucentric.sisgroup.sg
dev.sisgroup.sg
user.api.um2c.sisgroup.sg
unionpower.ucentric.sisgroup.sg
riya-fe.ucentric.sisgroup.sg
dev.sisgroup.sg
diamondenergy.sisgroup.sg
qa.ucentric.sisgroup.sg
www.peererenergy-qa.ssp.ucentric.sisgroup.sg
logosgumruk.com
*.sisgroup.sg
dev-api.ucentric.sisgroup.sg
api.pdf-generation.um2c.sisgroup.sg
uat.ssp.ucentric.sisgroup.sg

Certificate

The complete raw certificate details for user.api.um2c.sisgroup.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zC1J6Oj6TbIVyAnBiGU
rth6XBAIkxukgsq8TXq7kb38dwPjrUCUL4ntbyVX8iiwel/4KdOYGcEv88OmVXx0
XO1DlIGcsc6pBgUKe+w97D3VEMIWvnqOKICFe1Skcl1bvBTTmPKGOHugt7g12sde
UzayPpwtTrtilUYtEP/jTm7q9pPR/AX2O7zHKvJrnIb3eS0W9OYl7vmtwVhyDPSo
oelQ+S0OyFhGfhbwZPVa5FjgwSAbHcph+ee8YK+oi61AGDrLkvk0sri93ZPFZ950
cVdif/DrB3OPK4gUdQMpo5XlcxKJ/DHksRyR65XyNxBnAOmW58IxU+W2TmQUYWsw
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292092436950372431171215681561621267429857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 03:39:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 03:39:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'user.api.um2c.sisgroup.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26660300978384170156004290669511926071751185065580204264927192086258971896263479701714282182753453692296784895868912647940464775081579942244904956516291766474136993082096056053636367363758843610912303857671413478468339823168373567610864207712957986826514749755203554836296126175679382059778642997663045631821387422391265553527277714839617746283236904984895940226452452754778615784690938174342455779692430085093255894496664449593853642037836343881634830750295197321275289607497262072690281028449584131641099726180459910146313200644311588736270460210759750366480279945185488680877134881551131741499953334152724008874071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb5dd30cafd280916af67718890b64f052833467
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user.api.um2c.sisgroup.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.user.api.um2c.sisgroup.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fbc1994cb0000040300483046022100f40892a0f409f029f161cb04de54f2caa7218d7ffe893d36dd7af635a23c5316022100fdc7572adb12bc9f4d89ea9f36a46caf38a3c297a80a4e41f3a924251bcf420e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fbc1994c3000004030048304602210085511ef2ab22feb98831c1705360432ac55bf699c6d7c119ec67bbea62869c01022100b66941db8d1e31f524767b4fb76fa141a5b8b5f2268bda0b8a2778771814f318
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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