cfdpmp2.phillipmobile.com.sg

- Phillip Securities Pte Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a5:2d:19:f8:92:e2:a2:a1:00:00:00:00:50:f7:33:18 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Phillip Securities Pte Ltd

Organization: Phillip Securities Pte Ltd
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a5:2d:19:f8:92:e2:a2:a1:00:00:00:00:50:f7:33:18
Serial Number (int): 219556799417428377764173666139676029720
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 99:2f:fb:e2:1d:bb:c4:0d:e8:9d:3b:b4:d4:a5:e8:4e:27:71:c3:e0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bd:d9:82:4d:c9:8e:05:11:b8:16:3b:f8:15:28:e5:84:e6:77:d4:af
Fingerprint (sha256): 83:c8:c4:6b:d7:93:83:8f:94:93:a2:9c:c0:78:d0:c1:fc:35:2b:3b:44:dc:7b:ed:17:b6:44:59:27:cc:43:3f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cfdpmp2.phillipmobile.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfdpmp2.phillipmobile.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfdpmp2.phillipmobile.com.sg

Other certificates including the domain name phillipmobile.com.sg

(limited to 100 certificates)
www.phillipmobile.com.sg
incapsula.com
incapsula.com
PMPNLB01.phillipmobile.com.sg
imperva.com
cfdpmp2.phillipmobile.com.sg
msfintra.phillipmobile.com.sg
incapsula.com
pmph2nlb01.phillipmobile.com.sg
incapsula.com
www2.phillipmobile.com.sg
incapsula.com
www2.phillipmobile.com.sg
pmp05.phillipmobile.com.sg
incapsula.com
incapsula.com
PMPID.Phillipmobile.com.sg
www30.poems.com.sg
imperva.com
imperva.com
www3.phillipmobile.com.sg
www.phillipmobile.com.sg
incapsula.com
www30.poems.com.sg
incapsula.com
imperva.com
www.phillipmobile.com.sg
incapsula.com
incapsula.com
incapsula.com
msfintra2.phillipmobile.com.sg
msfintra1.phillipmobile.com.sg
incapsula.com
incapsula.com
cfdpmp2.phillipmobile.com.sg
www2.phillipmobile.com.sg
www.phillipmobile.com.sg
incapsula.com
incapsula.com
incapsula.com
www.phillipmobile.com.sg
PMPNLB02.phillipmobile.com.sg
www30.poems.com.sg
msfintra1.phillipmobile.com.sg
incapsula.com
incapsula.com
incapsula.com
msfintra2.phillipmobile.com.sg
incapsula.com
incapsula.com
incapsula.com
pmph2nlb01.phillipmobile.com.sg
imperva.com
www2.phillipmobile.com.sg
incapsula.com
msfintra.phillipmobile.com.sg
www2.phillipmobile.com.sg
incapsula.com
www30.poems.com.sg
msfintra.phillipmobile.com.sg
wds02.phillipmobile.com.sg
www.phillipmobile.com.sg
imperva.com
pmpnlb02.phillipmobile.com.sg
incapsula.com
cfdpmp.phillipmobile.com.sg
www.phillipmobile.com.sg
www.phillipmobile.com.sg
www2.phillipmobile.com.sg
cfdpmp.phillipmobile.com.sg
www2.phillipmobile.com.sg

Certificate

The complete raw certificate details for cfdpmp2.phillipmobile.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t9X+5YVtx1g6UgslaOF
6MAdg4Lz5W5I1aIeuxe9O/lNdpU2BVa3n70pV/c1OQBuuHoePcM89nvxWqx9kPec
ZcPhrwF7HLxnMQ3P8eTeyRa3Bt/zns5zoIOB9b0PHVzn1vFMSMpVH5Gj9JI+TXTb
umK39C4H8b439NqA3gw8eyprxFmf1+gAlAV3d+caAX3UfzHNCYZ9X7cEYO9+pnur
clHvQCWQQY+gEV009BC9FRSEdTW62Va+o9+JUmQGAzOJrhro5dUCYZu5gRRYm07z
CYwQCRD7A1BvheOmwMG4SJcHMxSNqCMyCy2C+RW64S61qSSmhm5VEh6xzbcvTGpR
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 219556799417428377764173666139676029720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 07:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 08:09:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Phillip Securities Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfdpmp2.phillipmobile.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30154851456620551622172197769818497533337174106081569714971209365728356844203146085580987225192738531746834498372809755646283284442266259600412010901091583248683470015977720799431000959886520002498197136709190347467636694918486047128176023585579483351282971494161338719686125314486022981707862426739039993495463644083128147990378176520993043373714570173354339622743742692101727595623484169096797376136831779897457636435801955462970337292749311867830536880689090684857043220691554379853328888840949852662523697861488280820996331324400980251451836557811617880417275762103180175000118077840706738455072038092527058440531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfdpmp2.phillipmobile.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992ffbe21dbbc40de89d3bb4d4a5e84e2771c3e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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