services.life.gov.sg

Issued by R3

About this certificate

This digital certificate with serial number 04:75:1f:44:44:1b:41:04:f5:0c:36:0d:8d:b9:ad:f5:24:3b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=services.life.gov.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:1f:44:44:1b:41:04:f5:0c:36:0d:8d:b9:ad:f5:24:3b
Serial Number (int): 388303741182209635526794621160718154933307
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:52:02:53:ea:e0:5a:ec:bb:63:51:96:a5:b0:42:b2:99:df:61:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:24:69:cb:ea:f9:76:fe:72:c0:66:26:12:fd:b5:05:1e:92:ff:2f
Fingerprint (sha256): 77:26:4b:77:37:65:c5:70:99:13:88:f3:58:cb:fe:64:7e:df:bf:07:9a:44:b9:f8:00:5e:ff:c5:7d:63:6a:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate services.life.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for services.life.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services.life.gov.sg

Other certificates including the domain name life.gov.sg

(limited to 100 certificates)
api.supportgowhere.life.gov.sg
supportgowhere.gov.sg
mylegacy.life.gov.sg
grants.life.gov.sg
assets.life.gov.sg
www.life.gov.sg
www.whycs.csforall.org
www.life.gov.sg
life.gov.sg
supportgowhere.life.gov.sg
suhitassociates.com
www.life.gov.sg
singaporediscovers.life.gov.sg
supportgowhere.gov.sg
dynamiclinks.babaosoftware.com
cryptobondfx.com
www.tanmoykarmakar.in
www.suomhosty.fi
staging.supportgowhere.gov.sg
services.life.gov.sg
support.gowhere.gov.sg
www.causewaycarrental.com
www.guidex.app
order.afuribayarea.com
www.life.gov.sg
www.life.gov.sg
staging.grants.life.gov.sg
www.sahibproductions.com
grants.life.gov.sg
mylegacy.life.gov.sg
services.life.gov.sg
report.probeyour.page
dev.token.life.gov.sg
player.playfm.cl
assets.life.gov.sg
supportgowhere.life.gov.sg

Certificate

The complete raw certificate details for services.life.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFHnrSgZKefro9pF88Hp
aDXEBfYdU3r2wJnCbRKPAuGJ66Z24EJqBdfBF/c1m26Bq1UbQBJJM4BFMHL46mDx
YtZXknJArvu/JCsF1/FH51MiPkKMzSlqtjfDB0v05ktSpE7+zVYhTWy6wffSCAzX
RpVHeKZFH7uPqPzNlPHLlyllj4wuFTHffQQWekrRC0vsG1i6afGkolzrDEo6cBOf
iSAMjOrCCVlSmeW9HeWy4m5PoaZYuCDMK8KaRq2Ogc3tPFLMZuDpR2CfCbDz39YE
51X5yL4NK/P8iiEHQZCsOBp1IetGtymvdsTUlzNfqn7uM7zVsIyUQQV5QzRRdVm7
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388303741182209635526794621160718154933307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 05:19:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 05:19:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.life.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21248424088163540177742438732098326839978229896202981945630373064863848251222105005041247166280418365272421210697099868449492595433828426915253130615165995873975311655696424692852084187685821342687004213880999132484772861359237480044444090838615540892279660915921091916080205551297406365860364663914752958247100886259314217351266961609199101381390453944594776109862991485861650172287233855192570565733117202374697053397747106293434705074870180557347219394859772524614250736206115265043272644571645301224979225918042969485192124145692270547243994150096891318704787701462820065855970180286015843619378249422755623189399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87520253eae05aecbb635196a5b042b299df6142
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.life.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189f2b36e23000004030047304502201f2eed078b6acc4496af76efb97072b19ed93de3522293d2452745f88f4e0d79022100a02ca3009f2a61ba459f4082bd49cd82b3bb08006f67eaf522b1fb3ce1666cf0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189f2b36e2d000004030047304502204111cc1552748b83f90d89a6b8c2d03c654a1d2ee9277658f1e8a993d5c3307f022100e1b44c82654571a0774c0afdf23e8e269f91ca6e63c6c03059ea79787ed46e65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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