*.gentleoakvet.com.sg
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ac:8c:b8:46:47:42:de:be:65:19:2c:5e:18:43:cb:4b:5a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.gentleoakvet.com.sg
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ac:8c:b8:46:47:42:de:be:65:19:2c:5e:18:43:cb:4b:5aSerial Number (int): 320052473633128581371486741278173262728026
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:43:86:5d:0a:26:d5:95:7a:47:41:df:b9:07:a8:e0:6b:73:74:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 67:8f:1b:2e:fd:ea:8a:b4:8d:7c:82:d0:72:cc:2a:7d:1c:80:6a:63
Fingerprint (sha256): ea:ef:83:0b:05:9a:d5:9d:3f:d2:97:32:9e:5d:6a:90:4e:de:46:74:87:72:d7:60:60:dd:fd:29:f5:1e:4a:5a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate *.gentleoakvet.com.sg
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gentleoakvet.com.sg
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
Other certificates including the domain name gentleoakvet.com.sg
(limited to 100 certificates)
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
mail.gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
mail.gentleoakvet.com.sg
gentleoakvet.com.sg
*.gentleoakvet.com.sg
gentleoakvet.com.sg
gentleoakvet.com.sg
Certificate
The complete raw certificate details for *.gentleoakvet.com.sg in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISA6yMuEZHQt6+ZRksXhhDy0taMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjQxMjU2NTJaFw0x OTEyMjMxMjU2NTJaMCAxHjAcBgNVBAMMFSouZ2VudGxlb2FrdmV0LmNvbS5zZzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOS49MkQpGFz/f6ltbrWRdn5 c34TTSdjC9GZQE+viHwfXqf0kdtO+WBRIhzGXzornt41psd4XYBgyvBylOYuCuTq 3Yh+ZGxwfHTWUpHiTuKqN4Z0RYUa5VU6w+YsZcHFYmjG88boNv8Aoz1ViH9liwK6 4B79+csXBTh3QcmzqNdFGnY7R3uIMvckhTvHxcy50ON9aIFBD0ElKZnGsRlYy8nU kVvkwbO3z9g7ULP53U01zRhP+wnK2Pxki4G8d6FOB/rpRLHwIYVAv4LQbkL77BfG jLpRJt1WXF3oBpAYD9XGP9xjfAIlJ8HS8GDxcmHqEy1zjDBkybh3dHXFPrakK30C AwEAAaOCAoEwggJ9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBUOGXQom1ZV6R0Hf uQeo4GtzdDowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA1BgNVHREELjAsghUqLmdlbnRsZW9ha3ZldC5jb20uc2eCE2dl bnRsZW9ha3ZldC5jb20uc2cwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAW1jj4DzAAAEAwBIMEYCIQCwMspF2ADb88cdrj8+03wrOwDH GYOl8XwulBQ2V55AcwIhAKYoQprf8Dyr327pAZtMrnZdLpxyIAnD59hwIpn20cSH AHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtY4+DGQAABAMA SDBGAiEA3vxa8UQIGra5Fip+Z1t+xa2b38DPEqOwFuWAWw9ZUSUCIQDGd47Y7ALg SNR/R98yYKwjF+ZvoHuyrT3dx7dJzHO1JTANBgkqhkiG9w0BAQsFAAOCAQEAf8R1 cLpRGk6xPIA1AS3FLYJpw7rA6vcVdbB95VByOTgJr0bZrwEGmwXe+grWHhlNMpb3 q7aAFa1ubHbaYabVJq8jBJ5J4i7KF5/u15DW1AVPPTs3u0wH2bagmv5gxs7QH3ZH Xr9cPxpNm0UE+nWtlyj5k89XxZawk4tuBEw1Dvk0f0/sg44DsJOOYvWZoKHXVLsO nyLC8DxTwBvlbz/3yE6uO5hlGLbTeHa1H+0kFjJ4QtEucM55xALsz8e1VJ2mYgjZ yABR40+umpn364YNrjrb+sdkSy0Jl+35Oi6pBoZ48kMKL9Zbf0tWFyUYTyrrpcVe 5TAr/3lAjUNNaYv46A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lj0yRCkYXP9/qW1utZF 2flzfhNNJ2ML0ZlAT6+IfB9ep/SR2075YFEiHMZfOiue3jWmx3hdgGDK8HKU5i4K 5OrdiH5kbHB8dNZSkeJO4qo3hnRFhRrlVTrD5ixlwcViaMbzxug2/wCjPVWIf2WL ArrgHv35yxcFOHdBybOo10UadjtHe4gy9ySFO8fFzLnQ431ogUEPQSUpmcaxGVjL ydSRW+TBs7fP2DtQs/ndTTXNGE/7CcrY/GSLgbx3oU4H+ulEsfAhhUC/gtBuQvvs F8aMulEm3VZcXegGkBgP1cY/3GN8AiUnwdLwYPFyYeoTLXOMMGTJuHd0dcU+tqQr fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320052473633128581371486741278173262728026 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 12:56:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 12:56:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gentleoakvet.com.sg' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28873538830301890780035332755149398169689138128506375396414937397199693842934894388989548047497952634382424695203724007740254275597581784628922330877239730568914143100576180255290250792229767091799773034834031121566680445642044369393364035417965017298526302152353676555262926955812963117851829762769102663298167728831530774057916308945487128015819774769814540246164099291056300892270284325956710332563832595101390912836243669443864370872154417662057270172274983925540501597670819991246749480056332863496367391463774434141943586752011478275988604921510999574856497622853469595240672048854719603364915836088070275607421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0543865d0a26d5957a4741dfb907a8e06b73743a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gentleoakvet.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentleoakvet.com.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d638f80f30000040300483046022100b032ca45d800dbf3c71dae3f3ed37c2b3b00c71983a5f17c2e941436579e4073022100a628429adff03cabdf6ee9019b4cae765d2e9c722009c3e7d8702299f6d1c487007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d638f83190000040300483046022100defc5af144081ab6b9162a7e675b7ec5ad9bdfc0cf12a3b016e5805b0f595125022100c6778ed8ec02e048d47f47df3260ac2317e66fa07bb2ad3dddc7b749cc73b525 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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