www.ial.edu.sg

- Singapore Workforce Development Agency -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d3:35:9f was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Singapore Workforce Development Agency

Organization: Singapore Workforce Development Agency
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d3:35:9f
Serial Number (int): 1356019103
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: ab:6a:3f:e1:48:12:30:cb:81:5b:ce:5c:e5:34:c3:0a:42:d4:68:b1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bf:80:44:ba:bb:49:be:7e:6a:89:69:bb:52:76:21:cb:33:6f:12:e3
Fingerprint (sha256): 4e:51:cd:6b:c6:47:fe:a0:77:6c:34:60:8c:01:d7:77:9e:7d:96:a5:9a:bc:85:22:1b:5b:88:5d:f6:dc:0e:64

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.ial.edu.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ial.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ial.edu.sg
ial.edu.sg

Other certificates including the domain name ial.edu.sg

(limited to 100 certificates)
www.fmbm.info
learningatwork.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
incapsula.com
learningspace.ial.edu.sg
events.meritkahn.com
portal.ial.edu.sg
learningatwork.ial.edu.sg
events.hamedazimi.me
incapsula.com
events.saludcontech.com
events.hamedazimi.me
events.hamedazimi.me
events.gosmartvalue.com
formularios.martinic.xyz
canvas.ial.edu.sg
portal.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
www.afawaseries-tz.com
incapsula.com
events.saludcontech.com
feedback.ial.edu.sg
incapsula.com
events.marianasworkinggroup.org
myaccount.mealcard.club
ial-tms.ial.edu.sg
community.ial.edu.sg
*.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
learningatwork.ial.edu.sg
canvas.ial.edu.sg
www.ial.edu.sg
learningspace.ial.edu.sg
www.virtis.in
events.hamedazimi.me
events.workplacelearning.ial.edu.sg
incapsula.com
link.livinginthegap.org
eventos.facilitandoamamentacao.com.br
incapsula.com
webmail.suss.edu.sg
incapsula.com
events.workplacelearning.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
www.ial.edu.sg
feedback.ial.edu.sg
learningatwork.ial.edu.sg
files.anu-biz.com
events.hamedazimi.me
uat-ial-tms.ial.edu.sg
incapsula.com
ial.edu.sg
learningspace.ial.edu.sg
community.ial.edu.sg
www.gipcgoa.com
events.meritkahn.com
incapsula.com
learningspace.ial.edu.sg
portal.ial.edu.sg
author.ial.edu.sg
incapsula.com
ial.edu.sg
webmail.suss.edu.sg
feedback.ial.edu.sg
incapsula.com
incapsula.com
events.hamedazimi.me
ial.edu.sg
www.virtis.in
uat.ial.edu.sg
incapsula.com
events.gosmartvalue.com
workplacelearning.ial.edu.sg
incapsula.com
learningatwork.ial.edu.sg
Ezekielp.ial.edu.sg
learningspace.ial.edu.sg
learningatwork.ial.edu.sg
incapsula.com
events.hamedazimi.me
ial.edu.sg
events.informasoft.ca
community.ial.edu.sg
events.marianasworkinggroup.org
events.hamedazimi.me
www.afawaseries-tz.com
ial.edu.sg
mediaspace.ial.edu.sg
webmail.suss.edu.sg
author.ial.edu.sg
incapsula.com
feedback.ial.edu.sg
www.virtis.in
events.hamedazimi.me
uat.ial.edu.sg
learningspace.ial.edu.sg

Certificate

The complete raw certificate details for www.ial.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSH1P6Tg5C8wcu8ybdv
CjdxNRhjwbCCrigNOKsTBUkhxw77gq+e/olvFugihdDxqIeltocsT5TKqMQo+DRG
n5EGWXulrZSBEXxNp1SMTVU9+Ys+a0scYHU/SMn3LVCZCgaG19qvIdYzy9A5hI+n
2B0nU7whMnDPDC6ylZdnNTBFtowETMhx5LMioxqsWvTBfo4pUh/3nUeXndrwxrYa
m95RYYzjEQrOTCkw0cNOu2fX2QKUNXxN3y/gkCedlZg+nhkrGC8tddadgDkK38LN
z64Fe8YwVHs6tnRUaQCRck07HivuJoLDdr1WIvfCbkP/rR89c73ChAEjRdbp5rdA
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356019103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-06 01:33:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-06 05:50:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore Workforce Development Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ial.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17786055331156737867928009000617480072700473048870326396341623067050691202731781901981364776525115250201224880127048772953173118976044718773547551189532979248671975890189232537271843196815348715568418597934577190362875729901233167016356616108596417603191265200558225110786248347213380510053993615837076154983490459144885297046087130686546183373500712674693857737715934193791966032221270929173118132117601750665694001857552944065265268354032198679491766413395235934616118551081935125382160787672045004219366588348993978154409748545518097021898289064101007565460443705027818881751329422557305614639766969491880437825753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ial.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ial.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab6a3fe1481230cb815bce5ce534c30a42d468b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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