singaporediscovers.life.gov.sg

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:3c:19:4c:41:6d:24:fb:41:b4:1b:89:22:f5:b0:3d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=singaporediscovers.life.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:3c:19:4c:41:6d:24:fb:41:b4:1b:89:22:f5:b0:3d
Serial Number (int): 12275102875405248082482358352461803581
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:49:be:6a:2c:5d:b8:06:17:71:07:a7:03:73:74:44:c3:61:8a:51
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 39:ea:b7:ca:56:59:a3:b3:24:8e:9a:b7:f3:82:1b:f1:83:fe:38:a9
Fingerprint (sha256): 6e:ea:ce:04:08:58:40:a5:9e:e6:ee:d1:35:ae:ca:b8:02:c6:68:04:61:f5:0f:8b:ae:07:19:25:9f:ee:56:0a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate singaporediscovers.life.gov.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for singaporediscovers.life.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

singaporediscovers.life.gov.sg
www.singaporediscovers.life.gov.sg

Other certificates including the domain name life.gov.sg

(limited to 100 certificates)
api.supportgowhere.life.gov.sg
supportgowhere.gov.sg
mylegacy.life.gov.sg
grants.life.gov.sg
prd-2.api.supportgowhere.life.gov.sg
prd-2.supportgowhere.life.gov.sg
assets.life.gov.sg
sit.api.supportgowhere.life.gov.sg
uat-2.supportgowhere.life.gov.sg
www.life.gov.sg
www.whycs.csforall.org
supportgowhere.life.gov.sg
sit.supportgowhere.life.gov.sg
www.life.gov.sg
life.gov.sg
supportgowhere.life.gov.sg
suhitassociates.com
www.life.gov.sg
singaporediscovers.life.gov.sg
dev.supportgowhere.life.gov.sg
supportgowhere.gov.sg
prd-2.supportgowhere.life.gov.sg
supportgowhere.life.gov.sg
dynamiclinks.babaosoftware.com
cryptobondfx.com
stg-3.supportgowhere.life.gov.sg
www.tanmoykarmakar.in
dev.supportgowhere.life.gov.sg
www.suomhosty.fi
staging.supportgowhere.gov.sg
singaporediscovers.life.gov.sg
dev-5.supportgowhere.life.gov.sg
dev.cms.supportgowhere.life.gov.sg
*.api.supportgowhere.life.gov.sg
*.gowhere.gov.sg
services.life.gov.sg
support.gowhere.gov.sg
www.causewaycarrental.com
www.guidex.app
cam-api.supportgowhere.life.gov.sg
supportgowhere.life.gov.sg
api.supportgowhere.life.gov.sg
dev-5.supportgowhere.life.gov.sg
stg-4.supportgowhere.life.gov.sg
order.afuribayarea.com
qe.token.life.gov.sg
uat.supportgowhere.life.gov.sg
stg-4.supportgowhere.life.gov.sg
www.life.gov.sg
dev-2.api.supportgowhere.life.gov.sg
stg.supportgowhere.life.gov.sg
uat-2.supportgowhere.life.gov.sg
stg.token.life.gov.sg
www.life.gov.sg
staging.grants.life.gov.sg
www.sahibproductions.com
grants.life.gov.sg
mylegacy.life.gov.sg
uat.supportgowhere.life.gov.sg
services.life.gov.sg
report.probeyour.page
sit.supportgowhere.life.gov.sg
dev.token.life.gov.sg
stg.supportgowhere.life.gov.sg
player.playfm.cl
assets.life.gov.sg
sit-2.supportgowhere.life.gov.sg
stg-3.supportgowhere.life.gov.sg
stg.cam-api.supportgowhere.life.gov.sg
supportgowhere.life.gov.sg
uat.api.supportgowhere.life.gov.sg
sit-2.supportgowhere.life.gov.sg

Certificate

The complete raw certificate details for singaporediscovers.life.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQhpAGJKJHo3vnkvE9eT
NB9h15dL6hyzDq2bnNDchfg45Wrut8oRulzZNzAMFy9PFFSsT0DUsW2FLxE897pk
e2XtWDodGF2uQstnZFdS8ESH1l62nw6SD7kRu8QMM/KpBBcixGLKNe4T6iFn6rsl
df/fkvVc1e3la4oa4bRSAIRCGR2D3pGl/gBGZAZX8I/DBArkFlIwkLt+tUizSiug
5LfPdLV5cmb3EwoZ25lnGdjTNItglCJzcEHwLrlu8fp5PB/APmuiFzlYDZqHOh7m
qN50znomm5Fi53eA3jgcZos4K375nC6Sy6q5u8yt2XvLQm5Dz7MZfiu7PUsqbBRf
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12275102875405248082482358352461803581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'singaporediscovers.life.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25882999723546193598770375023714667356370938012645698531766603540393709085455757611087272877816568238075459571351599347651512700388452280352549959603538442301064433286238475801042791882030611951832456183214875278257919453239602366704375306021560016831878298918454643544386427251956211073837511442544233293420570237466907561014538358270095353642225734038071810878127589165658156618552421842979476122887864706189396066693907920630193308866995064779882963051594427288929990230225646656372657043845452463474818433894544186316931334926322356270532586981293094114720913508793815318616529336165056980645172917866541809426313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0449be6a2c5db806177107a703737444c3618a51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporediscovers.life.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporediscovers.life.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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