mylegacy.life.gov.sg

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:ab:01:9d:b6:34:ec:34:28:09:f5:c3:de:e0:02:e8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mylegacy.life.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ab:01:9d:b6:34:ec:34:28:09:f5:c3:de:e0:02:e8
Serial Number (int): 2217143536215741159264467618304623336
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f1:1c:f5:12:2c:35:6b:43:7d:9d:b6:5a:e3:58:54:dd:2d:a7:cd:e7
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 23:2d:08:2d:e7:aa:6f:57:bd:e3:6d:2f:1c:d5:27:f2:e1:1d:71:8e
Fingerprint (sha256): ac:e6:60:43:27:12:d6:b7:9f:bb:cf:45:e6:af:e4:3f:39:0f:d0:d7:b0:1c:33:36:7f:3b:cf:fe:7f:ee:81:f1

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate mylegacy.life.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mylegacy.life.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mylegacy.life.gov.sg

Other certificates including the domain name life.gov.sg

(limited to 100 certificates)

Certificate

The complete raw certificate details for mylegacy.life.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjimR2DlYJIwbo0lpTb
+4EkTZSzihZcPSwsXjzbp3ldTiWEzAbUM2Z2zySr9iFt7wr5jhG61N0FVNMRnt7+
720Lcv8Y4QKrXAplcafKx2naX1u/UJ+lllnR78xW6TiuDo1RS3RqiEl1YJdQp5Mj
dFL2Gq4azay0vmcTsbYOIZciQTj2o+1Qc4kRHMjQ5Jm59Jk2pYxYekO02UFFJGQI
yDvFILPWTX1P8Ov1Zd0J14+ayo7syg7iRLGDWy/oIhC6v0hU3+c0c0gryiAWE2eZ
hXBHBEkqqKelRY1LRabQarrHX8xv8yMycKI4ely0OVzYIQ1g2ZLkk5UT5f9C+4mq
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2217143536215741159264467618304623336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mylegacy.life.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23745072657877396559122511348415845726664818945832212417449409483096838119808454051789838960659324208539708659400347071358395257177770341531860449870603375592669600629675416577124828828119186637634946437629353371221025445113109727065489919733397228604165160201396809431640165935929704512130434996239266323040076372457869348636417991638052668324746942333582577066506373604814231871047538843875838902249954458714188234229445070104282014609609887819613438492801826183442884734236485195257461555866491515489741569623073571634322885576043798032652015437841100214044318373378102641705894463785283854739379026447964962400869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f11cf5122c356b437d9db65ae35854dd2da7cde7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.life.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001869c2ea96b000004030047304502203547d6694ed683be2eb9df052c26cf53c89aa83942dfc6b828f9c8d67897d3d602210087eb788357e8716374b0b48ca6e15a26d56cb5936bbef92949ea9185d231f21f007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001869c2ea9a50000040300483046022100c004c078c4442341053b6fa9c0f6100b8c21e9b88c0e3a5afcbef8becbba0552022100a19d8b56caa84845abdd9767c34e0a90b1536e66383685d4708a7d9dc70d881d007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001869c2ea956000004030046304402207fd7b9c57b4d5eef837983349a7deb44db078af8221126955a0a443b05c3e5d802204d37b8ff2e680d8bda27d2013267250aeecc88213951a48979761ba893ead1a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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