test1.oto.com.sg

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 27:a3:19:6e:fb:f6:29:e7:0a:0e:69:f1:61:b1:e3:d9 was issued on by Google Trust Services LLC.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test1.oto.com.sg

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:a3:19:6e:fb:f6:29:e7:0a:0e:69:f1:61:b1:e3:d9
Serial Number (int): 52686752076869194903267803008471262169
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5f:4d:c1:3b:9d:bd:af:d1:b4:d4:ec:53:1d:0a:3f:d3:d3:5b:50:87
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): cc:9b:b0:d7:d5:a9:f7:9b:2b:39:ea:be:6a:7c:dc:7c:9b:ab:e0:3b
Fingerprint (sha256): 94:d7:e9:55:0d:4d:65:5b:12:ea:f7:11:7f:de:a4:31:b1:46:7d:89:6a:ee:c8:69:72:49:4c:94:b0:af:0d:12

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/OWm90tYNIqQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/X1CPcaEwA08.crl

Check the revocation status for certificate test1.oto.com.sg

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test1.oto.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test1.oto.com.sg
test1.zigwheels.ae
test1.zigwheels.vn
test1.zigwheels.co.th
test1.zigwheels.com.au
test1.zigwheels.us
test2.oto.com.sg
test2.zigwheels.ph
test2.zigwheels.my
test2.zigwheels.ae
test2.zigwheels.vn
test2.zigwheels.co.th
test2.zigwheels.com.au
test2.zigwheels.us

Other certificates including the domain name oto.com.sg

(limited to 100 certificates)
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
imgcdn.zigwheels.com.bd
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
test1.oto.com.sg
testingmedia.cardekho.com
testingmedia.cardekho.com
oto.com.sg
www.zigwheels.co.th
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
www.cardekho.com
testingmedia.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
www.zigwheels.co.th
www.cardekho.com
dealer.oto.com.sg
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
testingmedia.cardekho.com
dealer.oto.com.sg
www.zigwheels.co.th
www.cardekho.com
bacardi.oto.com.sg
testingmedia.cardekho.com
www.zigwheels.co.th
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
stageapi.carmudi.com.ph
dealer.oto.com.sg
bacardi.oto.com.sg
www.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
www.cardekho.com
testingmedia.cardekho.com
chivas.oto.com.sg
www.zigwheels.co.th
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
test1.oto.com.sg
www.zigwheels.co.th
test1.oto.com.sg
stageapi.carmudi.com.ph
test1.oto.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
oto.com.sg
dealer.oto.com.sg
www.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
test1.oto.com.sg
testadmin.oto.com
dealer.oto.com.sg
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
www.cardekho.com
www.cardekho.com
www.zigwheels.co.th
dealer.oto.com.sg
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
test1.oto.com.sg

Certificate

The complete raw certificate details for test1.oto.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjlxy05w92DHDmBVGrUm
UEMt0DSPDry9VPabo4da0BshPG1eArGaoWplLb1XmeJ5Enluaxdmes1oFO+rLqbp
uDSRv+qaWX8yEvat9o7f1DTxmRC92gTO6b6H65y896gMN1119szCRI5BPyChlXpE
bQLTBU6RdOnJRz4/lq6VnWo35a+dYg+g9i4UXAGvJnLL63eY2oZKgiufuk6F4G8s
R9LBhObAwYPZ0zs9bS/ddqHOk4EkVfHAgGmR+MxwGxHo4D2YymtNqRPqiBNW5Z3D
8KdGyy4obWGcidOT1qhMFCPzm1ujTEsgnHkPM7PoccS8slOARTy0Da0rNKJe/ALw
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52686752076869194903267803008471262169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 18:11:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 18:11:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test1.oto.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19469025907654097649023910259395592434132663277073966702989626937740641522872424173670614475939239006558102874466637625900800826808066187225152022637255486279733044005385781607361869249908275601536385159009394924163975906678671398218948962028554306287054439608720353923584633075618270838858117753248520864105570871598752499716138899957583305340801427206878585661729498926543202120858696647195799489175509059332407485618569649099496758748770875073817601279056898322529990807840331835351079255629748770828894213345156188312100894177793533849169821383309455218806581351920939730696533760535115147622661716507066387066933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f4dc13b9dbdafd1b4d4ec531d0a3fd3d35b5087
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/OWm90tYNIqQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.oto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.zigwheels.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.zigwheels.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.zigwheels.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.zigwheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.zigwheels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.oto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.zigwheels.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/X1CPcaEwA08.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038e2fdabe958ef9cf85002032f187cd2944b213fb024f391b649b151c9eaedb214f16aa4b9fac0ac24fd6e223ccad76aecb43b81e4d705bc10912b12107811d7cf4e4de7445d9b98bffa4536a613da96e35e39a0c1c03fb55470e5a4306908a91c1d20318980466f877984512e6dd8ed292c132851cc2ac165313b6b67c76686c16a143571d57f8bf1f86ad785eb5658024326631678b2638efc7b0e8ed307da64b24f55044b7948a329c7df563fa66c1305eecd2ac1c8309091671a82c7168c5c0cf4e3f9dbd04ef6152e671cff65acd7fa922e0a053b119eea246bfff113594709951905c64b1852b262ddad69f170554a48e2c6acf5377049721ba415a55c