rms.bsn.com.my

- One Two One Advisor Sdn. Bhd. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:f3:3f:38:95:3a:23:cc:e0:36:8d:67:e3:78:9d:29 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

One Two One Advisor Sdn. Bhd.

Organization: One Two One Advisor Sdn. Bhd.
State / Province: Selangor
Locality: Petaling Jaya
Country: MY

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:f3:3f:38:95:3a:23:cc:e0:36:8d:67:e3:78:9d:29
Serial Number (int): 19872202352378469411462834764249603369
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:80:11:f2:ed:95:77:88:af:c7:6d:6b:3e:19:43:b9:ce:bd:f7:88
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 25:8e:73:51:26:e2:12:3a:52:f9:09:05:61:ea:b4:0a:1f:59:0b:83
Fingerprint (sha256): a9:7a:85:93:e5:50:91:5f:dc:ef:79:99:58:36:b2:da:1d:0e:18:1f:f0:52:b4:ad:ce:ad:19:b0:f3:47:0b:db

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate rms.bsn.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rms.bsn.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rms.bsn.com.my

Other certificates including the domain name bsn.com.my

(limited to 100 certificates)
hr4u.bsn.com.my
fpx.bsn.com.my
rms.bsn.com.my
*.bsn.com.my
bi.bsn.com.my
boardpactest.bsn.com.my
www.bsn.com.my
salespro.bsn.com.my
hr4u.bsn.com.my
www.bsn.com.my
legal.bsn.com.my
*.bsn.com.my
legal.bsn.com.my
elearn.bsn.com.my
secureconnect.bsn.com.my
boardpac.bsn.com.my
smtp.bsn.com.my
*.bsn.com.my
bi.bsn.com.my
*.bsn.com.my
www.bsn.com.my
boardpac.bsn.com.my
crp-core-prod.bsn.com.my
boardpac.bsn.com.my
ecs.bsn.com.my
smtp.bsn.com.my
elearn.bsn.com.my
crp-core-prod.bsn.com.my
digo.bsn.com.my
hr4u.bsn.com.my
hr4u.bsn.com.my
ecs.bsn.com.my
www.bsn.com.my
itcareportal.bsn.com.my
crp-core-prod.bsn.com.my
fwd.bsn.com.my
legal.bsn.com.my
hr4u.bsn.com.my
salespro.bsn.com.my
bsnteams.bsn.com.my
elearn.bsn.com.my
boardpac.bsn.com.my
mobile.bsn.com.my
legal.bsn.com.my
boardpactest.bsn.com.my
rms.bsn.com.my
crp-core-prod.bsn.com.my
bi.bsn.com.my
ecms.bsn.com.my
ecs.bsn.com.my
*.bsn.com.my
elearn.bsn.com.my
mobile.bsn.com.my
basys.bsn.com.my
secureconnect.bsn.com.my
itcareportal.bsn.com.my
gini.bsn.com.my
mobile.bsn.com.my
smtp.bsn.com.my
www.bsn.com.my
boardpactest.bsn.com.my
banca.bsn.com.my
emm.bsn.com.my
ecs.bsn.com.my
legal.bsn.com.my

Certificate

The complete raw certificate details for rms.bsn.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCSM2ZJz3YqsntNnLhQl
32os+vAkxn+J3buoloByWFkYgPx9XL1AIX5Enk/ObxCNnJvj4Akm2Hb6jiT/Hds7
8f8l9NJoJcvXyAL/tIMk62ZQxqFcyOp0R9uS+mdZTfPvZNZ2bTKjG4a9Ulqiz07F
NEPb6w4Rph9YwK1kWgEaHhb3fZG42gOCDZJJT+cDmj+HS9uXwAh8WECr0slG+rgw
WPAhuhwIqQzqjpzO9DIKWUQ1ZXOFqQ2q0GbAViWxc8ZIVQ2wlmdFqFKkskJWkMLZ
jLswlnQx+ZklV9lZ7FQUj3MAGohzZluLMtqd3iIg0B5AqpvBqIMVAVxsF84tpQEn
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19872202352378469411462834764249603369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Petaling Jaya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Two One Advisor Sdn. Bhd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rms.bsn.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19711199147551428492270583604200708741555274497874932238761220991291067876251569222760703427252432254736138043675672264367963370262360415707518946430045246201716271911250597946998441386973274012920206772902750444818580463904947918679876628401748185153718661516456098829022012763720943752401644911397829218299529965844592453200839788781301438505586257330522269565744691722903162010740654278822197459580557718008615300531519557686691241579980388608032983307189399648299983285098906771561403551484120569850138653181217979914027960771484649640530748761340500422414151674922331632855898886899053180181224246363759900174329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc8011f2ed957788afc76d6b3e1943b9cebdf788
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.bsn.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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