ringgo.mbiselangor.com.my

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 06:46:7d:67:68:11:67:30:4e:91:06:72:77:0d:1d:fc was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ringgo.mbiselangor.com.my

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:46:7d:67:68:11:67:30:4e:91:06:72:77:0d:1d:fc
Serial Number (int): 8341372248715608654655842896302644732
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:0e:6b:a0:6d:b5:ac:ed:b8:d7:bb:d1:c9:c9:86:9c:7b:1e:0e:66
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 43:4f:a7:a3:b8:49:a2:26:17:e4:4e:22:e3:dc:40:73:2b:af:de:f4
Fingerprint (sha256): 2f:c3:b4:18:fc:bb:73:db:09:e1:51:73:85:df:50:95:47:b4:07:6b:af:87:1c:8a:f8:6d:89:63:cd:d4:1f:d0

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate ringgo.mbiselangor.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ringgo.mbiselangor.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ringgo.mbiselangor.com.my

Other certificates including the domain name mbiselangor.com.my

(limited to 100 certificates)
skwy.mbiselangor.com.my
brtinj.mbiselangor.com.my
kalajengking.mbiselangor.com.my
dues.mbiselangor.com.my
hwrr.mbiselangor.com.my
hxkk.mbiselangor.com.my
iuvg.mbiselangor.com.my
uenc.mbiselangor.com.my
eauu.mbiselangor.com.my
tsgm.mbiselangor.com.my
rthu.mbiselangor.com.my
khadijabryancampo.mbiselangor.com.my
acac.mbiselangor.com.my
fkei.mbiselangor.com.my
helx.mbiselangor.com.my
btja.mbiselangor.com.my
musang.mbiselangor.com.my
mwia.mbiselangor.com.my
mqpq.mbiselangor.com.my
vbtk.mbiselangor.com.my
hntu.mbiselangor.com.my
mvsl.mbiselangor.com.my
vlyp.mbiselangor.com.my
sirtukan.mbiselangor.com.my
gtvi.mbiselangor.com.my
cwji.mbiselangor.com.my
oprp.mbiselangor.com.my
skal.mbiselangor.com.my
iplh.mbiselangor.com.my
qkek.mbiselangor.com.my
doitsuhariwake.mbiselangor.com.my
vlgp.mbiselangor.com.my
djge.mbiselangor.com.my
cdky.mbiselangor.com.my
racinh.mbiselangor.com.my
qpau.mbiselangor.com.my
bazm.mbiselangor.com.my
pagul.mbiselangor.com.my
rntonf.mbiselangor.com.my
ponmi.mbiselangor.com.my
myportal.mbiselangor.com.my
dhte.mbiselangor.com.my
fprk.mbiselangor.com.my
mytf.mbiselangor.com.my
drkj.mbiselangor.com.my
eccq.mbiselangor.com.my
dkfo.mbiselangor.com.my
ijuo.mbiselangor.com.my
cbdoilhh.mbiselangor.com.my
doaa.mbiselangor.com.my
gidc.mbiselangor.com.my
okilus.mbiselangor.com.my
jddp.mbiselangor.com.my
jarh.mbiselangor.com.my
Cannabis.mbiselangor.com.my
ringgo.mbiselangor.com.my
situ.mbiselangor.com.my
grni.mbiselangor.com.my
angc.mbiselangor.com.my
yroe.mbiselangor.com.my
rgntal.mbiselangor.com.my
jfpf.mbiselangor.com.my
pvvc.mbiselangor.com.my
dkea.mbiselangor.com.my
rbif.mbiselangor.com.my
carpenterant.mbiselangor.com.my
liar.mbiselangor.com.my
racinh.mbiselangor.com.my
egac.mbiselangor.com.my
roti.mbiselangor.com.my
dciamn.mbiselangor.com.my
gded.mbiselangor.com.my
nsakal.mbiselangor.com.my
buycbdoil.mbiselangor.com.my
beln.mbiselangor.com.my
kerapu.mbiselangor.com.my
tato.mbiselangor.com.my
soragoi.mbiselangor.com.my
*.mbiselangor.com.my
*.mbiselangor.com.my
ejyh.mbiselangor.com.my
crfiki.mbiselangor.com.my
kudalaut.mbiselangor.com.my
poac.mbiselangor.com.my
jgbc.mbiselangor.com.my
sokagf.mbiselangor.com.my
jfnc.mbiselangor.com.my
znoo.mbiselangor.com.my
dwyz.mbiselangor.com.my
fbse.mbiselangor.com.my
ftoi.mbiselangor.com.my
egou.mbiselangor.com.my
pvjm.mbiselangor.com.my
xloi.mbiselangor.com.my
rdawn.mbiselangor.com.my
krme.mbiselangor.com.my
bgje.mbiselangor.com.my
brth.mbiselangor.com.my
jmae.mbiselangor.com.my
bcyf.mbiselangor.com.my

Certificate

The complete raw certificate details for ringgo.mbiselangor.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+VPQYgTL1/oLbFZjEoC
zDGBgu90e18bh7EPDo7XeLNv4TtC4CtKL7ToefpLgUjdGJa7k6UPKV3J89wrSaqG
utxzEhUVnlbMSyQ5OZeyPBncX6TYSqzKgqjx41vuLxLrlpXhc7iGDpRC1Ecyniv4
uRFkxUHo7VhNOf9KsR1TxUChUb6Sx91v0qiVaIkDz8Sp4W9RBS72bG/HwyCcayUE
Hv/L8FFica33EzZfK5pxdlphxnqMm7SjPIKcjdcVadWOzuWIDVqn5owmmVOWye/g
ClZbVZNixZPevl5i7M69ioVQrRH9SCXbr0c9hyc191iYPSOok5gEBNatN/OO6mUm
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8341372248715608654655842896302644732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 10:53:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 10:52:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ringgo.mbiselangor.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29274125222233251676777957689075727431664295565347563917246523133632224729187387623541134046636963154886357389984830935728258470271672983384177149765378517454958763904117466265791510605709826436958876382998484707026193790467436475355861443311996210777510344799599228827947632287249929208546830120214708379213313254977049528865059914691062361493178685394567232980866314693404483556241426569789857428202395140313375068241465079993101519189838373548658267955645882466918853781207694990520983102105970049434635413745741119506113372030000539432129179513653300800937275790678779839820379888439091858415780526842271515354627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringgo.mbiselangor.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d60e6ba06db5acedb8d7bbd1c9c9869c7b1e0e66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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