www.weather.gov.sg

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:37:df:54:10:8b:bc:9c:f1:5a:6d:b8:4e:3b:ee:3e was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.weather.gov.sg

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:37:df:54:10:8b:bc:9c:f1:5a:6d:b8:4e:3b:ee:3e
Serial Number (int): 16240841914266363061173903212469284414
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:60:2f:51:cb:01:89:17:a6:ee:b6:5b:3a:6f:56:34:e4:82:24:b7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4f:81:69:f8:2d:12:d2:bf:7f:8d:6d:87:8c:f6:8a:86:b3:9d:44:5a
Fingerprint (sha256): 90:66:31:22:f5:5e:47:72:4d:dd:64:05:d8:87:9b:6b:ff:44:55:3c:14:06:b9:da:93:12:8b:f1:92:33:69:25

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.weather.gov.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.weather.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.weather.gov.sg
weather.gov.sg

Other certificates including the domain name weather.gov.sg

(limited to 100 certificates)
www.weather.gov.sg
ccrs.weather.gov.sg
wis.weather.gov.sg
ccrs.weather.gov.sg
ccrs.weather.gov.sg
ccrs.weather.gov.sg
www.weather.gov.sg
www.weather.gov.sg
ccrs.weather.gov.sg
ccrs.weather.gov.sg
www.weather.gov.sg
www.weather.gov.sg
mssops.weather.gov.sg
ccrs.weather.gov.sg
wis.weather.gov.sg
www.weather.gov.sg
ccrs.weather.gov.sg
www.weather.gov.sg
rainapps.weather.gov.sg
ccrs.weather.gov.sg
mss.weather.gov.sg
www.weather.gov.sg
wis.weather.gov.sg
rainapps.weather.gov.sg

Certificate

The complete raw certificate details for www.weather.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ1FTh/uuygKSVkPd4rY
/s4DRcK8LokWOhqSx0JoT5H4SF7jNdPOYwedNPC3w1K2RTu2z14qz4u+ge5DdDb4
rdSd97g6PDCpYd3fKs7JLT425Kd8gWvCz8UyNvzPXrFjLVy/t6lCGULC3mW2x5aC
3/0xYrJ2hRFFIk82KKHJH1iHH8K2M0UxpxJNb1ZywR81qh8SNyXzIbkdivRlAg0l
uMINQ8y9hMnQs/prx7UNeYqMxN4NNENOsyrERYUvbcr+7XnRPac4pq95BAlOhPv0
RWy9BT7JkHSziq+C+H8vOqrpnBZ3VBOCRgG/Agq3tWsVlPI9Hw2CIH3KIfdiK6n8
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16240841914266363061173903212469284414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.weather.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19896966963792631458049538548684137067628183663823641988216295416972718520897857798438205237688711365291607508465574529289326961673451899593618907242012225264145981617704324278809489326145004399065583642677841077636050770452275542107924415102264245431747369835120627279175944846887042440832205895256365491156015053157786505314056498328911108581219655762040862371608957413922641381886056915732040911138668932550695919093314335165886111475319159377135723370148156738704954918690631848367323524756976351976278835888046708197924582863191132910370864529392836771965242743617406298612078273373910640052928396334933723446521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83602f51cb018917a6eeb65b3a6f5634e48224b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weather.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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