diy.gowhere.gov.sg

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:23:b6:8b:ec:dd:b9:18:e7:6f:70:ff:80:8b:f9:66 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diy.gowhere.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:23:b6:8b:ec:dd:b9:18:e7:6f:70:ff:80:8b:f9:66
Serial Number (int): 18794624815606504295582080225694710118
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:3f:e7:78:68:df:8e:86:25:1f:ba:e1:fd:56:02:dc:c0:8f:30:2a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c9:24:1b:37:67:20:ed:3c:c1:dc:68:62:6b:ae:10:1c:ee:60:05:62
Fingerprint (sha256): ed:85:4a:7c:3a:4f:56:20:7c:c8:0f:ba:6c:b3:e0:2a:1f:82:05:0e:0c:90:fa:68:74:2e:7d:cb:21:bb:e4:1c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate diy.gowhere.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diy.gowhere.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diy.gowhere.gov.sg

Other certificates including the domain name gowhere.gov.sg

(limited to 100 certificates)
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
stg.gowhere.gov.sg
stg.supermarkettrial.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
stg.token.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
stg-2.diy.gowhere.gov.sg
uat.flu.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
gowhere.gov.sg
stg.api.gowhere.gov.sg
*.gowhere.gov.sg
stg.edit.gowhere.gov.sg
stg-2.api.diy.gowhere.gov.sg
uat.diy.gowhere.gov.sg
stg.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.api.diy.gowhere.gov.sg
stg.react.gowhere.gov.sg
stg.review.diy.gowhere.gov.sg
gowhere.gov.sg
*.gowhere.gov.sg
stg-2.review.diy.gowhere.gov.sg
uat-2.api.diy.gowhere.gov.sg
stg.diy.gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
*.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
uat-2.review.diy.gowhere.gov.sg
support.gowhere.gov.sg
uat.token.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
uat-2.diy.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
support.gowhere.gov.sg
www.token.gowhere.gov.sg
api.diy.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.cam-api.gowhere.gov.sg
gowhere.gov.sg
flu.gowhere.gov.sg
*.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
www.token.gowhere.gov.sg
uat-2.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
api.identity.gowhere.gov.sg
stg.mask.gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
uat.react.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
stg.react.gowhere.gov.sg
uat.token.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
www.token.gowhere.gov.sg
uat.api.diy.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.react.gowhere.gov.sg
diy.gowhere.gov.sg
stg-2.gowhere.gov.sg
*.gowhere.gov.sg
stg.flu.gowhere.gov.sg
uat.token.gowhere.gov.sg
gowhere.gov.sg
uat.review.diy.gowhere.gov.sg

Certificate

The complete raw certificate details for diy.gowhere.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspf7KU++76N9HnyfKLid
xUdU+AcPCeW+oAYGAluU3Yf/CpehcYBkKjS3leLaHN9MLwGff+R3YXFhlxUp8OkD
h4B+IASVwKF4CG6woOJB4ld3PHnArGASvwWFYHIiEy9T5hafzW4MvAGL9TrDotZ6
1GqYmT/ouqDjA3nUbArwRYO8kep9oiZTi5ITiuUM9fQkPuVPHBR+p2pDyJ+50r+/
OautkRT+VvfmxV9s13Uugqheg3KBVXuo98Uggp6J16FAu/5Go0WS5MrkGrNBN/0P
WcfKataa2iUPKgQPnXts7hdACQoIWSV4JzYGDz2zAr9bEJmDzyWwvkLkE3xZ7qCH
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18794624815606504295582080225694710118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diy.gowhere.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22545362957157560430614324076832952388872592436728991655996071249327524574531751845998016157618312958990395922069163933092324900525166481088545226641646782040503346710067488800431828221729749527440197593719152973562942821586415935328670808282223920318268122072532487640086892684673575370760675010448738173570859562545579557215193132787178354650923421624483282045240167940981747187396258953352261391685309687335946315551222618298694709633047855559106264367007092886918562206523911131362473960834677771134190355994349756802023934361939384825816311950328139720040829561641161188506528674641166560784643441203186220697431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be3fe77868df8e86251fbae1fd5602dcc08f302a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diy.gowhere.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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