supernova.com.sg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:84:4d:94:49:d1:60:29:7f:e7:cf:de:df:eb:cd:48:87 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=supernova.com.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:84:4d:94:49:d1:60:29:7f:e7:cf:de:df:eb:cd:48:87
Serial Number (int): 325145521319443024508369779099411969558663
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:fe:aa:84:f4:bd:87:bc:bc:e1:d2:90:da:69:3f:ee:9f:4f:b4:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:ec:e0:29:4c:a9:43:74:1b:6f:ca:80:d2:45:77:f3:01:87:8c:85
Fingerprint (sha256): a3:d5:e9:17:d1:2a:99:00:dd:00:a4:9b:e6:41:02:32:ea:c4:99:fe:8c:c3:b8:10:76:a0:39:fc:ab:7a:29:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate supernova.com.sg

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supernova.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.supernova.com.sg
cpanel.supernova.com.sg
mail.supernova.com.sg
supernova.com.sg
supernova.dicesquare.net
webdisk.supernova.com.sg
webmail.supernova.com.sg
www.supernova.com.sg
www.supernova.dicesquare.net

Other certificates including the domain name supernova.com.sg

(limited to 100 certificates)

Certificate

The complete raw certificate details for supernova.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgISA7uETZRJ0WApf+fP3t/rzUiHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjQxMzA4NDhaFw0x
OTA4MjIxMzA4NDhaMBsxGTAXBgNVBAMTEHN1cGVybm92YS5jb20uc2cwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCER3Ft+K2OhFbv+RRDxp0A2Iy5Rx
eCm8B5c1jOUzVnop1+ndCEtrZ55mEwNjQ33HENZkqgGN+cBlDKbRbz5fgM0RdRQa
NV9/IkyxicteBquCDnwADQVg6PWguFIV9EwJFdkkQze4OcHon08FtBrg3O+405ky
FBhwkJCVvL2lhpRW4k4pY9vuMlKQk1rOdF/eUrIV9DR1PnoefeI2APk9a+XbR63c
K5/CLbbaob6CPeyfJh1SKATCgPEYibdmR/TRr1DZrwenpx0VKL8+PZALMS4ozGHJ
X6vh/MCEmMZIpPO+TOCj8jGwHQTlAlxQnVsRfY/33DaEY6HhQvyE9JonAgMBAAGj
ggM4MIIDNDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFET+qoT0vYe8vOHSkNppP+6f
T7RmMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wge4GA1UdEQSB5jCB44IdYXV0b2Rpc2NvdmVyLnN1cGVybm92YS5jb20u
c2eCF2NwYW5lbC5zdXBlcm5vdmEuY29tLnNnghVtYWlsLnN1cGVybm92YS5jb20u
c2eCEHN1cGVybm92YS5jb20uc2eCGHN1cGVybm92YS5kaWNlc3F1YXJlLm5ldIIY
d2ViZGlzay5zdXBlcm5vdmEuY29tLnNnghh3ZWJtYWlsLnN1cGVybm92YS5jb20u
c2eCFHd3dy5zdXBlcm5vdmEuY29tLnNnghx3d3cuc3VwZXJub3ZhLmRpY2VzcXVh
cmUubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A
AAFq6iw8UAAABAMARzBFAiB9L7AkdQFVqPRsKAS7Db83feGOuWVGmGRzWw1NtT5o
CQIhAO+o/juf4N4Mw8qdOtSSly0p1gLgUawMyS7sM0lZQiy3AHUAKTxRllTIOWW6
qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFq6iw+ZAAABAMARjBEAiAD0H18nXJ2
Bt9dJSaAl2blsZ2UFvFKU51wEO1UEeNyRQIgHjhqdkN/DsNkE41sY8CQj0DeAF76
bcX0aoTzOu7jFv8wDQYJKoZIhvcNAQELBQADggEBABuq9zeyEJZ3575gy1gKxRrh
8YKFqMi+FsPYwHdXGNcZxWfsCdtuJrZ4lnIH0sl/h47ySoTuVwCFii02n4XN6LsU
lb0nS8iiWf3t3CcEV6E/1ZK21iSv5NJ0EFNd3diKYMUjZFDEHQ6AmWa97QEksY/Q
Ww4zxlytLZ5kASRr/DSCkUvJQhGp5LaSDA2xh1/kgmGmzllEEq9t5eeC3OeV41t5
PHx78NQD8DnzsWCLMdDF/wuJRqOB41WJKCKujWd28l5i0907wFL/WGyDXGOkZAAI
dmFAwvdJgwejctG5wDIo8GBL7fvK/3dKfJLIu7rZFP+7CACZRGr19gsM9LZi9Pw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQhEdxbfitjoRW7/kUQ8
adANiMuUcXgpvAeXNYzlM1Z6Kdfp3QhLa2eeZhMDY0N9xxDWZKoBjfnAZQym0W8+
X4DNEXUUGjVffyJMsYnLXgargg58AA0FYOj1oLhSFfRMCRXZJEM3uDnB6J9PBbQa
4NzvuNOZMhQYcJCQlby9pYaUVuJOKWPb7jJSkJNaznRf3lKyFfQ0dT56Hn3iNgD5
PWvl20et3Cufwi222qG+gj3snyYdUigEwoDxGIm3Zkf00a9Q2a8Hp6cdFSi/Pj2Q
CzEuKMxhyV+r4fzAhJjGSKTzvkzgo/IxsB0E5QJcUJ1bEX2P99w2hGOh4UL8hPSa
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325145521319443024508369779099411969558663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 13:08:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 13:08:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supernova.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24368069686123487599791016122141880526176953177105921203560787645204724788942409666659621412450446109876133141648343715094336771290320987420477455967321925873103362676705300902299612205313084039898191570054884045164457326302542865082141251136731602972205644356149872542588180096760314233107520632535968408191213729269117706554594753304317026941189972956425046393069548193420094833989852845362151851559066738598843689338771761864985691949029891883786616845355389651019272068014906143524796633482302373078721307861800888761699965992787364547093293750186600725037774410442159646343964990259652219794163874457068462447143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44feaa84f4bd87bcbce1d290da693fee9f4fb466
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernova.dicesquare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supernova.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supernova.dicesquare.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aea2c3c50000004030047304502207d2fb024750155a8f46c2804bb0dbf377de18eb965469864735b0d4db53e6809022100efa8fe3b9fe0de0cc3ca9d3ad492972d29d602e051ac0cc92eec334959422cb7007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aea2c3e640000040300463044022003d07d7c9d727606df5d2526809766e5b19d9416f14a539d7010ed5411e3724502201e386a76437f0ec364138d6c63c0908f40de005efa6dc5f46a84f33aeee316ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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