www.ial.edu.sg

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:a2:af:12:a2:b0:2c:87:df:97:b6:4d:cc:70:55:56 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ial.edu.sg

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a2:af:12:a2:b0:2c:87:df:97:b6:4d:cc:70:55:56
Serial Number (int): 11478526955499086183991983060884149590
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:92:85:df:ae:2f:34:26:52:69:89:5c:4c:e8:26:29:a8:dc:ed:48
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ce:43:53:95:4d:21:50:ef:14:76:7a:72:8a:5b:97:31:29:29:7f:be
Fingerprint (sha256): 51:b9:19:94:18:c2:bf:fe:ec:7c:55:c9:f2:20:a4:79:ad:20:bb:24:45:f4:91:e5:42:95:ae:22:de:4b:14:00

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.ial.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ial.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ial.edu.sg

Other certificates including the domain name ial.edu.sg

(limited to 100 certificates)
www.fmbm.info
learningatwork.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
incapsula.com
learningspace.ial.edu.sg
events.meritkahn.com
portal.ial.edu.sg
learningatwork.ial.edu.sg
events.hamedazimi.me
incapsula.com
events.saludcontech.com
events.hamedazimi.me
events.hamedazimi.me
events.gosmartvalue.com
formularios.martinic.xyz
canvas.ial.edu.sg
portal.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
www.afawaseries-tz.com
incapsula.com
events.saludcontech.com
feedback.ial.edu.sg
incapsula.com
events.marianasworkinggroup.org
myaccount.mealcard.club
ial-tms.ial.edu.sg
community.ial.edu.sg
*.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
learningatwork.ial.edu.sg
canvas.ial.edu.sg
www.ial.edu.sg
learningspace.ial.edu.sg
www.virtis.in
events.hamedazimi.me
events.workplacelearning.ial.edu.sg
incapsula.com
link.livinginthegap.org
eventos.facilitandoamamentacao.com.br
incapsula.com
webmail.suss.edu.sg
incapsula.com
events.workplacelearning.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
www.ial.edu.sg
feedback.ial.edu.sg
learningatwork.ial.edu.sg
files.anu-biz.com
events.hamedazimi.me
uat-ial-tms.ial.edu.sg
incapsula.com
ial.edu.sg
learningspace.ial.edu.sg
community.ial.edu.sg
www.gipcgoa.com
events.meritkahn.com
incapsula.com
learningspace.ial.edu.sg
portal.ial.edu.sg
author.ial.edu.sg
incapsula.com
ial.edu.sg
webmail.suss.edu.sg
feedback.ial.edu.sg
incapsula.com
incapsula.com
events.hamedazimi.me
ial.edu.sg
www.virtis.in
uat.ial.edu.sg
incapsula.com
events.gosmartvalue.com
workplacelearning.ial.edu.sg
incapsula.com
learningatwork.ial.edu.sg
Ezekielp.ial.edu.sg
learningspace.ial.edu.sg
learningatwork.ial.edu.sg
incapsula.com
events.hamedazimi.me
ial.edu.sg
events.informasoft.ca
community.ial.edu.sg
events.marianasworkinggroup.org
events.hamedazimi.me
www.afawaseries-tz.com
ial.edu.sg
mediaspace.ial.edu.sg
webmail.suss.edu.sg
author.ial.edu.sg
incapsula.com
feedback.ial.edu.sg
www.virtis.in
events.hamedazimi.me
uat.ial.edu.sg
learningspace.ial.edu.sg

Certificate

The complete raw certificate details for www.ial.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rq/FeRQCBiEAFKG7Cla
t4o2LaX0oJ61M/O71Toy2MJ/U9w+Efa79drRt2InhIurnUavMsL/3D04c6779Krp
MP/ygx5gmV5NgnH2NiRs2fh5cL+EjZbkoIJWGsBJGhWWHUqXeWM8Vj0AUxJICcSH
UY9wZ7RHWh8BY2t+ZcZ418QqokIt5IgKxyGRCTrVKhKwV6r7PwNYDUmGsEo+snV1
Zc63HsEjZvUmxRfjw0N6m/XLH7agNE+ESifFEvHPe6GE0zWeMeL1afiZFhqn97n6
PRARyK86GJ2ir3go/J2SHfBnlDBzMbNy65Z1tE94RCuvJ5GcU0h2pYkLuN7G2m0t
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11478526955499086183991983060884149590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ial.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30136804677637040966993414048879587914315824299520865037560576421628946059730511764355740193174759853314934904826826499458960207201762950598540492537518399686272935107567529075938539732404755988728270616879199295104928548375568461767072770811005376829180843568061419807004130362911955546985234421594256261204125104977391250123364924785068118463260743401608450148385401455390966668944999570012141274986307864151242369948647215436134925030624736771264942150310117185199534753945487964073773789773886043608594705281526013511462891791098857277118429461296064986304719181096856297760110258703402083446694409903552443788693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a9285dfae2f34265269895c4ce82629a8dced48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ial.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018aaa8fd58e000004030047304502202de50ef55ada9270a1fbcd677ba1b9795865943265815112b97622cd9e634bfd022100a2ccd1f2cc3fa2fdae41b5c912b06017273e3b81617e54097225a307ec1b921100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018aaa8fd5810000040300483046022100ed714739f2e618cde1beb71bb2465438a1de2632633328ea07fde605c51dbc1a022100a077c8ffa2b72db724f389b0df45416367cfef48a440186fbb9991e0445c48b4007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018aaa8fd5570000040300473045022100caee5e4b9374868263f739dfaa526ebbad6397592292f85c56ba611fcf08fc320220752b31214a0b6b6e5ffed768dea782c66049bc840f9066b98a171ecdf36c2001
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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