palsuat.lta.gov.sg

- LAND TRANSPORT AUTHORITY -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 52:bd:87:88:34:98:fc:3b:b5:f1:84:b7 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

LAND TRANSPORT AUTHORITY

Organization: LAND TRANSPORT AUTHORITY
State / Province: Singapore
Locality: Singapore
Country: SG

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 52:bd:87:88:34:98:fc:3b:b5:f1:84:b7
Serial Number (int): 25606897817279898395872429239
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b3:66:26:63:11:b5:65:b4:2f:ba:fc:f7:47:43:3e:c6:92:d6:f7:8b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 4b:5e:7a:ad:f4:64:46:5a:49:d4:93:72:02:92:3f:8d:67:f5:14:f9
Fingerprint (sha256): 26:5c:32:9f:42:2f:16:7c:e8:51:44:af:8f:22:cc:4a:15:ef:74:d1:78:9a:37:75:80:e5:3f:db:ea:1c:80:f6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate palsuat.lta.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for palsuat.lta.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

palsuat.lta.gov.sg

Other certificates including the domain name lta.gov.sg

(limited to 100 certificates)
ca.gccu.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
datamall.lta.gov.sg
ocoe.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
vrl-ilink.lta.gov.sg

lta.gov.sg
vrl.lta.gov.sg
erp.lta.gov.sg
vrl.lta.gov.sg
portal.insight.lta.gov.sg
ocoe.lta.gov.sg
surveys.lta.gov.sg
ivepintrauat.lta.gov.sg
ocoe.lta.gov.sg
ocoe.lta.gov.sg
efms-uat.sso.gccu.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
ocoe.lta.gov.sg
onemotoring.lta.gov.sg
ocoe.lta.gov.sg
*.insight-uat.lta.gov.sg
vrl.lta.gov.sg
prompt.lta.gov.sg
vrluat.lta.gov.sg
*.insight-uat.lta.gov.sg
digiwork.lta.gov.sg
prompt-uat.lta.gov.sg
lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prodintrawebbi.erp2.lta.gov.sg
ignite.lta.gov.sg
*.insight.lta.gov.sg
ltalinkuat.vrl.lta.gov.sg
ltalink.vrl.lta.gov.sg
gateway.ccrsp.lta.gov.sg
*.insight-uat.lta.gov.sg
testparweb01.erp2.lta.gov.sg
gateway.ccrsp.lta.gov.sg
prompt.lta.gov.sg
prompt-uat.lta.gov.sg
insight-vdi.lta.gov.sg
sslcertificate5.queue-it.net
fmw.ccrsp.lta.gov.sg
kibana.ignite.lta.gov.sg
surveys.lta.gov.sg
prompt-api.gccu.lta.gov.sg
lta.gov.sg
kibana.ignite-uat.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
prompt.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
surveys.lta.gov.sg
datamall.lta.gov.sg
ltalink.vrl.lta.gov.sg
prompt.lta.gov.sg
prodparweb.erp2.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
careers.lta.gov.sg
gateway.ccrsp.lta.gov.sg
fmw.ccrsp.lta.gov.sg
*.insight.lta.gov.sg
surveys.lta.gov.sg
websvc.efms.lta.gov.sg
fmw.ccrsp.lta.gov.sg
cagw.gccu.lta.gov.sg
gateway.ccrsu.lta.gov.sg
palsuat.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
uat.eps.lta.gov.sg
prompt-uat.lta.gov.sg
gateway.ccrsu.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
surveys.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
erp.lta.gov.sg
fmw.ccrsu.lta.gov.sg
app.safejourney.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prompt.lta.gov.sg
gateway.ccrsp.lta.gov.sg
ivepintrauat.lta.gov.sg
gateway.ccrsp.lta.gov.sg
vivr-uat.lta.gov.sg
vrluat.lta.gov.sg

Certificate

The complete raw certificate details for palsuat.lta.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8elb021ajxB2JylJVf4
lZ7ortMPzVf7r9FCteJi61VUW79clPNl4JNUn6AlBR3xcOhNLXZALKYSrPb4hQez
r/0kbyUL3PN8M+IaPjQXR4++sJKS5rigf7zYSM5y0F3sI9oDLhCRMEPBPRFWJUXa
E40dV5yakhrGVuQwWvSpqUic44AG/z6+y4w/qyKla8WqJPFUkhwLaXXul6vZnEdC
+sHzoWXCvTshgDBOnpwqesyri9gHfrRxMcS4Wi8zqhwSuhdY6YNBRMXcBRnG75gM
d2ESNySYmB5yce5OBYclEy5dMw2lNDOZ8GBKywvwbdGOE83BL8oZ+KZMEtASL895
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25606897817279898395872429239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 08:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 08:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LAND TRANSPORT AUTHORITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'palsuat.lta.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25724825133182167979813818761773364259899548922491839505388289917278335111006431195067355001364390451017296630439227809740430664822777394801449143664745148621025506573579525076906884473889936951335253279055585761856428962180050611570719968134473903031495774121066842291503200775295053133303107498134925332696662448335660705967541597871636238359312344080650432792567883612231346226742672865871772023060857671575393181482125198100992550474042751212557214034165593741115058158704674157983397476180566377345320592232929423856616132386183610451242883834537236906396583387194438123685069018729441016233804353423061466184097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palsuat.lta.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b366266311b565b42fbafcf747433ec692d6f78b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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