ci-labo.com.sg

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 0d:04:d1:52:8c:d7:03:ad:a2:bc:0a:f6 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ci-labo.com.sg,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:04:d1:52:8c:d7:03:ad:a2:bc:0a:f6
Serial Number (int): 4029129328332462539751033590
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 98:a6:dc:98:e1:55:58:03:cb:dd:9f:d8:9d:93:a9:5e:ee:31:a6:4d
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 30:3f:37:3f:ed:5d:ed:66:05:5f:57:d8:ea:28:11:e8:b1:00:40:1a
Fingerprint (sha256): 79:2b:4f:8d:10:1a:d1:8f:44:bd:89:20:20:c4:1b:34:15:eb:38:dd:b0:e8:4a:12:f8:bc:83:87:af:38:e4:3f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate ci-labo.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-labo.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-labo.com.sg

Other certificates including the domain name ci-labo.com.sg

(limited to 100 certificates)
ci-labo.com.sg
ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417816.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417816.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
ssl417818.cloudflaressl.com
ci-labo.com.sg
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417817.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ci-labo.com.sg
ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
sni.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ci-labo.com.sg
ssl417817.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ssl417816.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
www.ci-labo.com.sg
ssl417818.cloudflaressl.com
ssl417816.cloudflaressl.com
ci-labo.com.sg
ci-labo.com.sg
sni.cloudflaressl.com
ssl417816.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417818.cloudflaressl.com
ssl417817.cloudflaressl.com
ssl417817.cloudflaressl.com
ci-labo.com.sg
www.ci-labo.com.sg
ci-labo.com.sg
ci-labo.com.sg

Certificate

The complete raw certificate details for ci-labo.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QC9ybtf2rS9pB4LPoKE
UTAoheQrc66E4/RNUgSDfJao4xTpVcsrmsa5Z9d+6SVWj9xINaWRHzT7lz3MdVQd
c/FjjfkY77uXsQorm+yjPF/ctMEVJExeUUAcaoq0MT3s0mEW9CRHW9AqFKvfU6w+
SOfBmOmzQcQXwX+vCruRPDP5dMBfgtQIUgTAh2ddpXNQ9viAXtVsWcXBeq6viq/l
J84iYkP/1qBgCF7NNv1XSXIlpwwzvqobXYh0huYInbtVTkbQnGOcfKsAmqOGcNPw
9Gr9So7h0evRVWT2NiVSN3kTVLSwoAqgqd9INM0SpUaflQ16UIMYIObeJKHzmv3h
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4029129328332462539751033590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:43:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 12:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-labo.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27394077755597390855800386697688917940242574231194218479243549729995303203893993959026040115086301364307095624479809220960608342299271899981826078605949793683672562748401477136055503430733593145269120154975855253943310660349146527813165058756979754516713194745369794847483091183378265446643144421763502349669111603754459127091997317719553122654915492121532625228101951897350226604003842592097808439534996102307985097720483684408300470092895109484999947307178040193648174521024948855886448979163219210676392994794460432573787383171576277476380598038064270827314911713541832898154075341746077738835693259781878237225241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-labo.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98a6dc98e1555803cbdd9fd89d93a95eee31a64d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016edb3c935000000403004730450220590d774e25b94ee3123cf942d6c8773cf70749bbc77238f705067ef831c7739f022100c7fb44bd93e073305bccc11725ac58297513d6a5ed6ba8f51d02a37a1afda5960077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016edb3c939b00000403004830460221008078f3a67bf1964dc0c56844b00fe3de655d638c2e7f0e466adfab84ff7157f9022100c5f42948f34309de0be76e3155527f6fb21ba0d29d5ddb8d98725de885e8e4e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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