uat.api.diy.gowhere.gov.sg

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:ba:2e:9a:14:77:05:73:32:50:ea:96:70:ed:06:00 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uat.api.diy.gowhere.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ba:2e:9a:14:77:05:73:32:50:ea:96:70:ed:06:00
Serial Number (int): 16917448363418851693094528722930566656
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:26:c3:f8:83:5c:33:f8:af:21:19:ff:9c:4a:c8:fb:3f:dd:6c:2e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1f:90:f4:a5:e4:8a:ea:ca:e2:ff:a2:9d:1e:83:1f:91:d4:db:fe:97
Fingerprint (sha256): d2:11:a3:45:6c:3f:17:39:a0:cb:8d:82:51:78:d6:09:ae:b0:18:4c:54:ce:19:ef:b6:1b:55:45:50:13:2c:8c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate uat.api.diy.gowhere.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.api.diy.gowhere.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.api.diy.gowhere.gov.sg

Other certificates including the domain name gowhere.gov.sg

(limited to 100 certificates)
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
stg.gowhere.gov.sg
stg.supermarkettrial.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
stg.token.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
stg-2.diy.gowhere.gov.sg
uat.flu.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
gowhere.gov.sg
stg.api.gowhere.gov.sg
*.gowhere.gov.sg
stg.edit.gowhere.gov.sg
stg-2.api.diy.gowhere.gov.sg
uat.diy.gowhere.gov.sg
stg.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.api.diy.gowhere.gov.sg
stg.react.gowhere.gov.sg
stg.review.diy.gowhere.gov.sg
gowhere.gov.sg
*.gowhere.gov.sg
stg-2.review.diy.gowhere.gov.sg
uat-2.api.diy.gowhere.gov.sg
stg.diy.gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
*.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
uat-2.review.diy.gowhere.gov.sg
support.gowhere.gov.sg
uat.token.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
uat-2.diy.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
support.gowhere.gov.sg
www.token.gowhere.gov.sg
api.diy.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.cam-api.gowhere.gov.sg
gowhere.gov.sg
flu.gowhere.gov.sg
*.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
www.token.gowhere.gov.sg
uat-2.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
api.identity.gowhere.gov.sg
stg.mask.gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
uat.react.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
stg.react.gowhere.gov.sg
uat.token.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
www.token.gowhere.gov.sg
uat.api.diy.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.react.gowhere.gov.sg
diy.gowhere.gov.sg
stg-2.gowhere.gov.sg
*.gowhere.gov.sg
stg.flu.gowhere.gov.sg
uat.token.gowhere.gov.sg
gowhere.gov.sg
uat.review.diy.gowhere.gov.sg

Certificate

The complete raw certificate details for uat.api.diy.gowhere.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshGIk1RLTwKaMEFsgzKJ
q6BCYGw1RqBiIw37wCG9o2+qGAHSsSHj7Yu2Rf8Wj8m6GG2bXpVXOrGPPfeNG93H
SHS53IDfsIkmjf+5LBj2wNNNgnZqFG+O5xE7Uk+dJWsFrqaM67XTNJk5R4NoIp40
WAy5VMaIRgSVUOVHyT4FEyOiF1GX2qDlU3+vdQkLRiLYRSqckpDOkhRDaa7UGJ39
g8qrec6kG+8/TjAceklzkuHdbrrkqy57BypflLbkzNP03Xc9w9e/3p+//e7o7CeK
g7ANu/Vo7MwZq4RS9SubEBNClSYbvS0YIc2Y9ZnCQlJfY2zvUgHar/9FSiQd5A2C
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16917448363418851693094528722930566656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.api.diy.gowhere.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22479064374099127975729938082437603736201838527204420462524735588084301349206205336410818578410754362517049771750364147054929207920430014682607772633566269098733818654996855574582044410028065342369015912454621892383000826799033400132945419611191199356810043394837231334036641684765614222454810267409625665210441168436365604455913324339195859230888887293655978035661166679970589816155215078857947866993342032329130247997108212366821779605291621039008993330044296064641758653002431487895890036254191728498701965490238767703039817139834214861132259978674556777207899007795437838106574393837586782264606823412575501124209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b726c3f8835c33f8af2119ff9c4ac8fb3fdd6c2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.diy.gowhere.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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