proinvest.com.sg

Issued by Amazon

About this certificate

This digital certificate with serial number 02:81:2c:f4:91:27:91:e0:bf:c2:e7:f4:a2:62:3a:9b was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=proinvest.com.sg

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:81:2c:f4:91:27:91:e0:bf:c2:e7:f4:a2:62:3a:9b
Serial Number (int): 3329174088938202083973630407821376155
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 57:59:45:39:95:dc:70:ab:c7:12:e7:ae:50:b3:1b:2b:53:e0:7a:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 75:2c:f6:ad:fd:9a:ee:c4:8b:2a:12:ff:3a:00:28:0b:1b:2d:43:09
Fingerprint (sha256): 99:47:08:f8:76:e2:83:e3:94:93:01:5d:41:88:e6:11:b0:b9:3e:89:d0:3b:31:39:97:a1:b6:48:3b:f2:47:ab

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate proinvest.com.sg

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proinvest.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proinvest.com.sg
protectionavivacontreleau.ca
roadwingsinsurance.com
roadwingsinsurance.ca
road-wings-insurance.ca
qualtrics.at.aviva.com
support-logmeininc.at.aviva.com
saye.at.aviva.com
archergrc.aviva.com
protectionetancheaviva.ca
protectionavivacontreleau.com
thirdparty.avivabrand.com
riskasyst.ie
protectionetancheaviva.com
qa.avivaassurance.ca
road-wings-insurance.com
practice-autoenrolmentmanager.co.uk
road-wings.ca

Other certificates including the domain name proinvest.com.sg

(limited to 100 certificates)
gi.proinvest.com.sg
aem-staging.proinvest.com.sg
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com

vue.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
gi.proinvest.com.sg
vue.proinvest.com.sg
dn.proinvest.com.sg
proinvest.wildcrayon.com
docushare.proinvest.com.sg
iap.proinvest.com.sg
iau.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
docushare.proinvest.com.sg
proinvest.wildcrayon.com
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
cert01.as.aviva.com
proinvest.wildcrayon.com
proinvest.wildcrayon.com
dn.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
iap.proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
dn.proinvest.com.sg
gi.proinvest.com.sg
dn.proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
info.proinvest.com.sg
docushare.proinvest.com.sg
*.proinvest.com.sg
ssp.proinvest.com.sg
proinvest.wildcrayon.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
vueint-prod.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
gi.proinvest.com.sg

Certificate

The complete raw certificate details for proinvest.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHPH972N/ZXT1IlSdjAf
HpNfrESDd76+FBtFYBEYKfW8HWMSHHqKQJ/1obaVspmERMYu8mGV1V/MCbujAipw
j18rOvq10fUJg9FrCglFYXtCvY8sam3e4PQPOgUWvCeBI8Ksyu1xVa257ptNbtUQ
ssN/vddzStpqQBTrxR2Vh3NgeOxQs36BRqk1AnVbvlsyayHRWNGAeDUmwFxpcAtU
L9hLVRazBw6M6V9rH5Ultl35OPFaLRYakzKA049/7bbMKB9rEbFARJxeeaQIvVid
lm+sF/B9Rp41e80YITDdrIyoQgJJmr9EtxCGpktM0gb1nfcQxbQqJnx//WemjS57
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3329174088938202083973630407821376155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proinvest.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25809708013220261524389137892579327570332755380681144334364706346281660533163352943406679992098820387380464227632054722861988968356391137033258863238624043337601598823598913475032197524292574127592086622929812892360663679394573424465358832634821831933490698225528267338272956885049292801650174708314512168032314834487358401640155279304337930230750481790045716386977367871494590846404593951046858862920025806166975297006638315946314279502999240146266304836883024501737373275835861990972335955845630411336417000988623255248823178955336035430291125096660879037407520707091068771002127982880274013252586520069930868439919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5759453995dc70abc712e7ae50b31b2b53e07a91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proinvest.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualtrics.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-logmeininc.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saye.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archergrc.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdparty.avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice-autoenrolmentmanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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