flu.gowhere.gov.sg

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:f0:5e:b2:4e:ce:95:08:be:f4:4a:08:a5:9a:2f:64 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=flu.gowhere.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:f0:5e:b2:4e:ce:95:08:be:f4:4a:08:a5:9a:2f:64
Serial Number (int): 13211123881617845561898658653837864804
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:13:c1:9a:87:1d:31:fd:02:df:b2:f9:59:49:96:61:de:b8:0b:cc
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e7:76:6d:2a:c1:45:9a:6b:e3:f4:7b:6f:3a:fe:7c:d2:26:81:10:67
Fingerprint (sha256): 71:bb:74:5f:af:53:a0:fa:db:1f:29:73:91:dc:d5:29:92:a0:ef:56:ee:44:0e:74:61:1d:10:83:f2:1f:10:5e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate flu.gowhere.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flu.gowhere.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flu.gowhere.gov.sg

Other certificates including the domain name gowhere.gov.sg

(limited to 100 certificates)
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
stg.gowhere.gov.sg
stg.supermarkettrial.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
stg.token.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
stg-2.diy.gowhere.gov.sg
uat.flu.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
gowhere.gov.sg
stg.api.gowhere.gov.sg
*.gowhere.gov.sg
stg.edit.gowhere.gov.sg
stg-2.api.diy.gowhere.gov.sg
uat.diy.gowhere.gov.sg
stg.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.api.diy.gowhere.gov.sg
stg.react.gowhere.gov.sg
stg.review.diy.gowhere.gov.sg
gowhere.gov.sg
*.gowhere.gov.sg
stg-2.review.diy.gowhere.gov.sg
uat-2.api.diy.gowhere.gov.sg
stg.diy.gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
*.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
uat-2.review.diy.gowhere.gov.sg
support.gowhere.gov.sg
uat.token.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
uat-2.diy.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
support.gowhere.gov.sg
www.token.gowhere.gov.sg
api.diy.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.cam-api.gowhere.gov.sg
gowhere.gov.sg
flu.gowhere.gov.sg
*.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
www.token.gowhere.gov.sg
uat-2.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
api.identity.gowhere.gov.sg
stg.mask.gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
uat.react.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
stg.react.gowhere.gov.sg
uat.token.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
www.token.gowhere.gov.sg
uat.api.diy.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.react.gowhere.gov.sg
diy.gowhere.gov.sg
stg-2.gowhere.gov.sg
*.gowhere.gov.sg
stg.flu.gowhere.gov.sg
uat.token.gowhere.gov.sg
gowhere.gov.sg
uat.review.diy.gowhere.gov.sg

Certificate

The complete raw certificate details for flu.gowhere.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraSb61R7CskWTop88kCX
EzRwYOquDHTPOk3IQJifIHMzi8f1X26snibuq29FLFHbeqIYjubLy6UcqsMIvfLL
6c27SgkgEIod2ywFcdVjPqGKezDNkGSRulWDJrB7+EBFakiV2fDm8fYI5EIVJK/g
Lieam2T6zBy2n7jL9U6ZeNrQjXOu1kIkTYR+IAKEpzeJe3aFPXMcC9wu5UaGpRtV
BqtIaab7CHWm/usbUigNTZM//UCbeWJMcnVjDSblqN5b+jCaRjFpeX++MDnsCXfG
29USbz+Ygy0O5/M2vxpHWHZZnyhgqgPWA4fCO2K9/ygOeY0VZbgIOUymCKKWnyqQ
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13211123881617845561898658653837864804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flu.gowhere.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21920398511729979436651205633474052778410646486349088730614281167585170391553385095877291085855217575534443851327141180839106890735032470216441071905732098368297348251490785898821064095400710896541161885687161289537245340008057462616580505816790891559461518919336038697371136186768900260760704404096139971360806065542216853770304020454216242641937392330333093138812187306311294982209170441151997813325498746008236986067002765736835811712150204949530212249892371649420826767310024861544822091316712618418768105012828342795709857844968312049046763917690845087832770922719970660922819020483724170193200305869923747008523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb13c19a871d31fd02dfb2f959499661deb80bcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flu.gowhere.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e7a7ee8660000040300483046022100f90632cb516ef55e70ad9c0bce897a415a3959ad7a4e43dc56ef8d91c198eff3022100c24bd90d4ae6b233813eca54ba99a2df762c1298baccaf52236fffbba05898a50077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e7a7ee8640000040300483046022100b81b2217e343fbfa99cbb55c86caa5e2b2771425fec533bed40a2f80706e441d022100c5a294e71d92cc463c0e159f21848d6d0075a5259b664308d965205d1f27a0c2007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e7a7ee8800000040300483046022100d248a4fa4e974e26b8a5de4fad8eafb3bd5eca18764dd756f4a7818bff333c4c022100dc13c3be0fb4e19919236482f76f6b5a95c04c76285a72700f1b4b800a0053f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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