proinvest.com.sg

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:9e:32:a6:d0:51:38:7f:02:d3:36:ef:fb:8c:3f:1a was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=proinvest.com.sg

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:9e:32:a6:d0:51:38:7f:02:d3:36:ef:fb:8c:3f:1a
Serial Number (int): 18101374185678640894150212226179153690
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d1:6d:28:fc:2e:fc:a8:36:20:75:58:b8:4f:16:2c:57:14:05:06:db
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e8:3b:36:a1:17:ed:f3:7f:43:5a:95:a0:cd:66:8e:d3:b6:e3:e7:6d
Fingerprint (sha256): a5:12:ba:24:6f:d1:58:99:21:58:65:d1:5e:0a:a7:98:65:9a:46:eb:3a:fe:f2:68:50:85:5b:a1:ae:0b:a1:7a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate proinvest.com.sg

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proinvest.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proinvest.com.sg
protectionavivacontreleau.ca
roadwingsinsurance.com
roadwingsinsurance.ca
road-wings-insurance.ca
qualtrics.at.aviva.com
support-logmeininc.at.aviva.com
saye.at.aviva.com
archergrc.aviva.com
protectionetancheaviva.ca
protectionavivacontreleau.com
thirdparty.avivabrand.com
riskasyst.ie
protectionetancheaviva.com
qa.avivaassurance.ca
road-wings-insurance.com
practice-autoenrolmentmanager.co.uk
road-wings.ca

Other certificates including the domain name proinvest.com.sg

(limited to 100 certificates)
gi.proinvest.com.sg
aem-staging.proinvest.com.sg
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com

vue.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
gi.proinvest.com.sg
vue.proinvest.com.sg
dn.proinvest.com.sg
proinvest.wildcrayon.com
docushare.proinvest.com.sg
iap.proinvest.com.sg
iau.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
docushare.proinvest.com.sg
proinvest.wildcrayon.com
gi.proinvest.com.sg
proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
cert01.as.aviva.com
proinvest.wildcrayon.com
proinvest.wildcrayon.com
dn.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
iap.proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
proinvest.com.sg
dn.proinvest.com.sg
gi.proinvest.com.sg
dn.proinvest.com.sg
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
vueint-prod.proinvest.com.sg
vue.proinvest.com.sg
info.proinvest.com.sg
docushare.proinvest.com.sg
*.proinvest.com.sg
ssp.proinvest.com.sg
proinvest.wildcrayon.com
cert01.as.aviva.com
gi.proinvest.com.sg
cert01.as.aviva.com
proinvest.com.sg
vueint-prod.proinvest.com.sg
gi.proinvest.com.sg
cert01.as.aviva.com
gi.proinvest.com.sg

Certificate

The complete raw certificate details for proinvest.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCVreXyHPw4SzTWfwig6
flv6kAN5nIWvkb6BF+6K+s2xuF42lrfWvU654fuTd9g6xddjuQVmtldbCMmJulbQ
2TX8psp5lu0M0Fa678Q/pj/CBoDe4WMjOzq/HqE+rFN3VUmyU/igo47vagqVwad+
KLyJ7iFpJd6Lp9zS99LwcnEJ9H2g3bWtk4+6d7vQMtOL0Jabixs/XIMXBKAGxSbp
YpRFT5lYH3P3iHZ3G5gg/GHnawl4/v7OuzaCxZ4bTxdycNgrUs6qGcHij3CcRI/u
2zcGW7aVWAYfUXn2Z0n2TcQ3JE9TLX5oxwKuaxg9npGXiikqrMQFjj/sVaoEUFwP
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18101374185678640894150212226179153690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proinvest.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24761160175545756074147552333910379720258282461351718752664111289213166496284713553259900558131099506173417782197178386753058422940238528292897127661466022335079418623382187390007458185878614240373088086649854929845060102863873756202193048381214328058296842309975225822079748071426540178096012332229976848066182505720158569652767501126674489485157210180368775906403727577453811318755162124797738788919027377922606825204018917595491635837814853445806142517150205276343968935207238238074590943837329117376306774264906348442016772902515672649236607307180590618201803665166225479459070863033733964128479314033646317080491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d16d28fc2efca836207558b84f162c57140506db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proinvest.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwingsinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualtrics.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-logmeininc.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saye.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archergrc.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdparty.avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice-autoenrolmentmanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road-wings.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b480165e9275216a7a69983fe7660608aa4dc33c0fbbb62914ed4913025186c9bb5839cf676f6c8ba5df116fa50654508582f879b0b958497d6901bb5e30d61288570e237df375ccaada8290fd9d7922f06d151668d13358a20901ee976efdb4286b4368dcfb8114cf94de945e6f68b75a3d788e4501872033f33bd0ea250387515167ba13cec377b9487375db940e10300add8ee84b67cb7d1dd498aaa4848a991d9b8cba54621e9a095476bbdf824fcec5f25c34133f1b0ff7684ff3e0315eb7f9ba0e491d5e00cc7feafb121fb006944fbd1cd83ff5b8ca2889f45166a3b7f9fe7b0b51e07d2d0b3e38adb098f8769d19df772802def6224b753f4fe04f09