gi.proinvest.com.sg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:2e:82:06:33:f6:06:14:48:b8:d9:f6:c0:e1:a3:8b:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gi.proinvest.com.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:2e:82:06:33:f6:06:14:48:b8:d9:f6:c0:e1:a3:8b:24
Serial Number (int): 325712044755547059764092070916514663074596
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:51:22:46:79:a9:57:ed:cf:46:2c:07:81:0d:ef:d0:43:34:8e:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:ef:02:62:07:dc:0a:c0:33:33:49:53:ac:de:90:dc:30:cf:67:f0
Fingerprint (sha256): f7:67:3b:a4:86:e4:13:de:d3:2b:06:21:6f:ac:ea:a2:f5:a8:62:80:dc:50:57:44:9b:bb:b1:8e:dd:06:18:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gi.proinvest.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gi.proinvest.com.sg

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gi.proinvest.com.sg

Other certificates including the domain name proinvest.com.sg

(limited to 100 certificates)

Certificate

The complete raw certificate details for gi.proinvest.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISA70uggYz9gYUSLjZ9sDho4skMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjkwODEzNDdaFw0y
MDAzMjgwODEzNDdaMB4xHDAaBgNVBAMTE2dpLnByb2ludmVzdC5jb20uc2cwggGi
MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCPmSKwNtVHWa3mMGV0SP6MLHmQ
stNMwT6T20VYPx9zCZR56QBB7Cqfwj5j4/tD6jHOqxTRbskDNA+ZyCpfUCcPpxkk
in+u9iOciFfq66ais17YfdFfKY1FBspoJBG3fKa9S7dsWh9fIFB8ntb+BGSSQCaK
D4zeMZek3vP/3xpwKyN7HjJdvuj7ZSga7TKWrOuw+pVcvRtfawdPg+YS/K0KEdU+
6R8HNdUrCW1rZWEV5CR2KpGE5GufHXLZVNVWIR7KeC/BXh987XdQmYif1uQxrkK2
oCg6uxaa1IAsT25Y+N7agd1evEQQWNWYlddx/H/u5lkM49aUtejQjjD3oVT4Tm2a
hAdobzB2FXGIQElxJUMhAUEus/C866SurYq3FZzT/oCjz7p7RuZjQE7htTwO6mO7
YKgfb8KRnNtnEOXgBuFlNf2T3YEy0j5FSu8tNxncsKC382NuSfIpwNIAvVlFR3Lb
exvhLS8oCNEXHvHH7Y4HtfadhNfE5XARFvSSwoECAwEAAaOCAmYwggJiMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUOFEiRnmpV+3PRiwHgQ3v0EM0jrUwHwYDVR0jBBgw
FoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUF
BzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUF
BzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAeBgNVHREE
FzAVghNnaS5wcm9pbnZlc3QuY29tLnNnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFvUO7YFQAABAMARjBEAiAsHPGBdxkYV7+PBMfP
wKVwAJDQCL/FzpZjW+61JeA0EwIgZTL6pqugUDS8atWgIHgn6o3CMkIOPSSSn2Tr
0uTAIDoAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW9Q7thn
AAAEAwBGMEQCIDlPFayoPEuCCRSSL8/5HiNs0OsLBWA+Su0I2UabVIYtAiAHVQf8
xIqf/PCuEh+pZoYrQyd935+wizzYmUH2b8tjUzANBgkqhkiG9w0BAQsFAAOCAQEA
Bv2w8mQko2/MKhMfKj3JcdH3UONgdNVagXE5tn1U+fKB5eFM2UrUB1KIZdiyjt7O
NfQ6GQkB4FiTU9xdKkVGQ5iggOh6DK+ZLmU7Y7E/YZOnYLiCjgM7l4tRfH98JnhV
uD9FXCXawQ0Bw6dbeHJlJ+YnWp1tdkDk//v/nnOlxVIKB+6UPcN745TPbU0CMU6m
Nt+IrjQVFvsuCnzbNyA+ng9VJLVW62DD05+nBI8Q8NJoA0PSUK9nEeR2OOhgQ26y
A4uyEA3evp7hA21tBWLjSo4Os4wu/gHsCGMw2butjwmxyb+TIHP24SBrZYK7r1Zc
ZemOF7vgYXYA0KQdvcHm6g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325712044755547059764092070916514663074596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 08:13:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 08:13:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gi.proinvest.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3258784686356324763865337150914429606856356536973448954447994932840866486406586015284791943071825993878548671802858148755560383619234804238500570013894062758958564298170697233983941320006585002527278632974565027162285358003703601850626690753868983650972231672495727188478473672461696402136267651107912239773052820814496526171421599409312714627031769803042747458286213247925039297258823592204295717903050678082024325924788043441255626452653001620116430349928702983206282312053203917556792667735819798466232410503488070699367130198829342625067607612928099802511961853499159070590233037163166051015376327975624540544342228669423550212377748946543501576431049932383815256789318824610805760934196577597135577776802421822681334374920758692327292164956156723737610700639178180260399464010298023329414254139784230474456785406093386568335236559360279936581320000469415825051953888700455354444816406812345589228000109097292533775647361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3851224679a957edcf462c07810defd043348eb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gi.proinvest.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f50eed815000004030046304402202c1cf18177191857bf8f04c7cfc0a5700090d008bfc5ce96635beeb525e0341302206532faa6aba05034bc6ad5a0207827ea8dc232420e3d24929f64ebd2e4c0203a00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f50eed86700000403004630440220394f15aca83c4b820914922fcff91e236cd0eb0b05603e4aed08d9469b54862d0220075507fcc48a9ffcf0ae121fa966862b43277ddf9fb08b3cd89941f66fcb6353
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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