www.ci-labo.com.sg

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1c:2f:21:16:18:bc:7c:74:1e:72:15:d3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ci-labo.com.sg,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:2f:21:16:18:bc:7c:74:1e:72:15:d3
Serial Number (int): 8722556034224290206107964883
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 3e:b2:bb:ba:59:55:09:a7:35:a4:9f:c6:50:c8:81:6a:6b:91:1e:1f
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 13:07:85:97:ac:79:ad:97:27:67:b8:3c:38:7b:30:9f:b9:36:6c:ea
Fingerprint (sha256): 35:1b:c3:8b:63:76:71:58:5d:dd:5d:66:78:3f:48:6c:60:56:2b:96:17:50:62:c6:ec:d8:fa:c0:19:af:70:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate www.ci-labo.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ci-labo.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ci-labo.com.sg

Other certificates including the domain name ci-labo.com.sg

(limited to 100 certificates)
ci-labo.com.sg
ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417816.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417816.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417818.cloudflaressl.com
ci-labo.com.sg
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ci-labo.com.sg
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
sni.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ci-labo.com.sg
ssl417817.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ci-labo.com.sg
ci-labo.com.sg
sni.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ci-labo.com.sg
ci-labo.com.sg

Certificate

The complete raw certificate details for www.ci-labo.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVTjgczmBdkm4KsOA6ph
8gUqnPj3MlY/kqAM0kDvVVs99VyKEPCCkT3EbB+ROzxxqTMZNcA3LN6HpKEge1yz
9hIsh+pd7JB5WG0jV0gC7eMP9fSahhepgL1E+6gNjSgOp1119M5j6XpulpZ/wE9l
u+Xk9BkUe86TjIWklev51kvdxE/1A/2wkwp8ugEZD68N/CEEOkL+EYYi+yexG7GR
2rA50tgXwo+f6njyWKNbatdcQmws5FCgdYvdUtmPQH90Co9RR36F2uk8IarbrgzG
Wcd9Y8KhAZE9zlrKhEYDSFUM/h1GIDfVUIZSVQ2R3D/u2uNBDc2SIBbiNTHJ97+n
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8722556034224290206107964883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 13:00:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 13:00:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ci-labo.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25920712695840064001274450995495948106455468428295606930429114154058419645452958503777662627971427865510888051188314917312143353102361237710758981230045779054073434477836656879210704408306126993747516061061991269815684317464897121160846179994322380668018347128021661485819478020869366801275461854677744099465942233545160237008337350115692111182091364811584621295159324794914683435507516020931998967805639189527443820900907024425140239130181431924422304538009922508204920435957340356709202807892483939660796432925006025434511162440078105549755814234232864062927333685307647239163440622581154067832840092412256819586999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci-labo.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eb2bbba595509a735a49fc650c8816a6b911e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016788c15a7600000403004630440220018c35003de58734c73e5d4d4be462a8b15f48d13671971ab9a8f6047ee5a6b8022014eda8864e65067803145111064f79309863f030c209d927c673438e752beb59007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016788c15a450000040300463044022002309afcd91ce379b04aa5cf8982e70fc978c473e411461c314b6a3226c4a649022024e0cb52279cb2115347cc7f7329248e1cae08addb8fd96a344b39e64f0cb358
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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