epayslip.cpgcorp.com.sg

- CPG Corporation Pte Ltd -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:19:2f:36 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

CPG Corporation Pte Ltd

Organization: CPG Corporation Pte Ltd
Organization unit: CPG Corporation Pte Ltd
State / Province: Singapore
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:19:2f:36
Serial Number (int): 1276718902
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 1c:c5:53:5c:f4:e1:18:7b:ea:e2:52:97:5d:9a:2c:56:71:87:74:aa
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 19:7c:92:b3:e2:0e:1b:0b:ab:bc:d4:a8:ff:ed:5a:78:10:c8:75:e0
Fingerprint (sha256): 4a:00:04:04:2e:1a:e8:5d:a8:6a:f3:7a:c6:c2:51:0f:fd:b5:16:c4:7c:b8:11:69:2e:26:bb:97:d5:8f:9a:a9


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate epayslip.cpgcorp.com.sg

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epayslip.cpgcorp.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name cpgcorp.com.sg

(limited to 100 certificates)
gate3.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
truesupport.truerx.com
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
epayslip.cpgcorp.com.sg
eservices.cpgcorp.com.sg
eps.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
wup.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
eservices.cpgcorp.com.sg
gate3.cpgcorp.com.sg
gate3.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
epayslip.cpgcorp.com.sg
eps.cpgcorp.com.sg
sts.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
eservices.cpgcorp.com.sg
truesupport.truerx.com
gate.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
Access01.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate.cpgcorp.com.sg
eps.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
gate3.cpgcorp.com.sg
ess.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
lyncwebextdir01.cpgcorp.com.sg
ess.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate2.cpgcorp.com.sg
sip.cpgcorp.com.sg
support.ata-services.net
sip.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
servicedesk.austinretina.com

Certificate

The complete raw certificate details for epayslip.cpgcorp.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcz1CzmhmklEjTUuE9hi
YTM7lgrAsEzteU7YK590C0G2RoIlYDRqrgUKa+EgG7nLJYjiV7Q6tnbUzCVlvViR
sqCn4ETf3jVNnxxU/LlzI3dLjOYCcR8vfFc4Iah5W8GZ0QdEx5uUhBfcLErMVsIO
cn5O+QfaCrr4+nlg52AbZ1yJGZhr2RcgpUuykGbC9Ml2zkXw419d2cK4er1wd9US
FoC3q+Bw2Rux75bBDoz/mu71ATNxEplG2lp99ykIhBiukbr6Bs329FhZRp2cgqy6
fmltUYkYrPBFvHeN+soi5kTY5fKIhOn8LQBb84ItEB/5NYQXKLYjCaMZUyo8oMDJ
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276718902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-15 09:23:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-15 10:45:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPG Corporation Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPG Corporation Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epayslip.cpgcorp.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16890762723916249442207359310231676606192073776193443103552910659356037548045538854517278118181713935228938480491189337890098777212019313091500230062569958204916438787153728346660398455563039712982441530009558597519448286870815695223706013232845693487763676935119983941756123803622613184496662569489457395740557335593355133895548347413044643962901123852240588658101212967973411178518766677952041857887305190534608436936550278147349493633957190588096222878006168692663590106541365129676304627851910794815431321346398823864396666808892781260940624177554232394021265477592069623386877375083124551089058342934789000055171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cc5535cf4e1187beae252975d9a2c56718774aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024f9861d00aa0e347dc27ff36a1af900902c6de3b3185417cf7dad56f1635f504069a4c06d30e62dbadd9a2c2a44a757ed06f961a9d071c0191caeec7fd15698fc4f336b73c9bab4e79f9778f776ac8349703d7b2eb14fc9c84b94b75b32c2157fb029a1f3ef9bd5f1fa1f100d6764d49b0d1591a0d6e7075f614233aed45242c92eb7651852ad2d9eca5211af8a00273f5c3d3a64ee50d68236bfb8880692746040de27ca7a7a874fc73563877f306bb064383de6783e18fbb758c63eb71aac53cd364188456074b0d4c81340a3efcecd751ce1172d818c304ddc673c49d0c3b4b7b30f8b6a8a9d95e8ed1cf28c4f2f75053438f1c3ba25d800d7b2b9857f5a