ns6a.aci.a-star.edu.sg
Issued by R3
About this certificate
This digital certificate with serial number 03:f1:27:0f:75:22:40:d2:22:e0:b9:a8:0b:3f:0c:25:52:76 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ns6a.aci.a-star.edu.sg
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f1:27:0f:75:22:40:d2:22:e0:b9:a8:0b:3f:0c:25:52:76Serial Number (int): 343396828375271141608489676613121361662582
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6e:f8:b4:50:fe:77:c0:5e:50:69:6b:88:95:6e:6e:cf:ee:d7:4b:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c7:f7:3a:13:97:f2:a6:be:b2:b4:c8:a3:09:fe:0e:ed:a9:0d:c2:01
Fingerprint (sha256): 01:16:8d:6e:3f:85:58:b0:f4:ee:54:9e:ba:e9:61:52:1a:e0:76:00:f2:d8:af:16:81:6a:57:e6:74:a0:43:8e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ns6a.aci.a-star.edu.sg
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ns6a.aci.a-star.edu.sg
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ns6a.aci.a-star.edu.sg
Other certificates including the domain name a-star.edu.sg
(limited to 100 certificates)
attach.ibn.a-star.edu.sg
vps11.dpo.a-star.edu.sg
securenet.imcb.a-star.edu.sg
www.brc.a-star.edu.sg
incapsula.com
officeconnect.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
owa2k3.ibn.a-star.edu.sg
edocs.scei.a-star.edu.sg
ns6a.aci.a-star.edu.sg
gwbti.bmsi.a-star.edu.sg
disco.bii.a-star.edu.sg
springer2.map.fastly.net
www.research.a-star.edu.sg
ASTAREXPEDGE.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
asapmbpro01.a-star.edu.sg
incapsula.com
recruit.a-star.edu.sg
vpn.acrc.a-star.edu.sg
*.ejproxy.a-star.edu.sg
incapsula.com
ns0imap1d.aci.a-star.edu.sg
aci.a-star.edu.sg
www.a-star.edu.sg
git.i2r.a-star.edu.sg
dpo.a-star.edu.sg
*.gis.a-star.edu.sg
cloud.a-star.edu.sg
incapsula.com
incapsula.com
bmsismtp04.bmsi.a-star.edu.sg
springer2.map.fastly.net
*.springer.com
ns11-afs56.fusionfest.a-star.edu.sg
*.imcb.a-star.edu.sg
wildcard.gw18-226-ext.dpo.a-star.edu.sg
wireless.ibn.a-star.edu.sg
allercatpro.bii.a-star.edu.sg
mail2.ime.a-star.edu.sg
itssnwbpise.a-star.edu.sg
oar.a-star.edu.sg
edocs.scei.a-star.edu.sg
incapsula.com
*.a-star.edu.sg
springer2.map.fastly.net
*.bii.a-star.edu.sg
webmail.ibn.a-star.edu.sg
extranet.scei.a-star.edu.sg
ns11mailadmin.fusionfest.a-star.edu.sg
skyappnet.scei.a-star.edu.sg
wildcard.dpo.a-star.edu.sg
p61lab.ns6.fusionfest.a-star.edu.sg
springer2.map.fastly.net
apps21b.ns0.fusionfest.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
springer2.map.fastly.net
securenet.imcb.a-star.edu.sg
eprs.a-star.edu.sg
support.a-star.edu.sg
webmail.ibn.a-star.edu.sg
epprd06.a-star.edu.sg
careers.a-star.edu.sg
ns6-ghcpi.aci.a-star.edu.sg
*.gis.a-star.edu.sg
ns8survey.aci.a-star.edu.sg
sift.bii.a-star.edu.sg
lab.a-star.edu.sg
edocs.scei.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
prdap03.a-star.edu.sg
wildcard.gw68-220-ext.dpo.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
fusionfest.a-star.edu.sg
mail.scei.a-star.edu.sg
justattach.imcb.a-star.edu.sg
webmail.gis.a-star.edu.sg
incapsula.com
ku.a-star.edu.sg
appsvc.a-star.edu.sg
incapsula.com
incapsula.com
*.ejproxy.a-star.edu.sg
incapsula.com
kmprdqp1.simtech.a-star.edu.sg
repo.simtech.a-star.edu.sg
support.acrc.a-star.edu.sg
*.a-star.edu.sg
ja-ns2.dpo.a-star.edu.sg
vpngw.a-star.edu.sg
edocs.scei.a-star.edu.sg
core.i2r.a-star.edu.sg
selfservice.a-star.edu.sg
*.ejproxy.a-star.edu.sg
researchers.a-star.edu.sg
vps11.dpo.a-star.edu.sg
securenet.imcb.a-star.edu.sg
www.brc.a-star.edu.sg
incapsula.com
officeconnect.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
owa2k3.ibn.a-star.edu.sg
edocs.scei.a-star.edu.sg
ns6a.aci.a-star.edu.sg
gwbti.bmsi.a-star.edu.sg
disco.bii.a-star.edu.sg
springer2.map.fastly.net
www.research.a-star.edu.sg
ASTAREXPEDGE.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
asapmbpro01.a-star.edu.sg
incapsula.com
recruit.a-star.edu.sg
vpn.acrc.a-star.edu.sg
*.ejproxy.a-star.edu.sg
incapsula.com
ns0imap1d.aci.a-star.edu.sg
aci.a-star.edu.sg
www.a-star.edu.sg
git.i2r.a-star.edu.sg
dpo.a-star.edu.sg
*.gis.a-star.edu.sg
cloud.a-star.edu.sg
incapsula.com
incapsula.com
bmsismtp04.bmsi.a-star.edu.sg
springer2.map.fastly.net
*.springer.com
ns11-afs56.fusionfest.a-star.edu.sg
*.imcb.a-star.edu.sg
wildcard.gw18-226-ext.dpo.a-star.edu.sg
wireless.ibn.a-star.edu.sg
allercatpro.bii.a-star.edu.sg
mail2.ime.a-star.edu.sg
itssnwbpise.a-star.edu.sg
oar.a-star.edu.sg
edocs.scei.a-star.edu.sg
incapsula.com
*.a-star.edu.sg
springer2.map.fastly.net
*.bii.a-star.edu.sg
webmail.ibn.a-star.edu.sg
extranet.scei.a-star.edu.sg
ns11mailadmin.fusionfest.a-star.edu.sg
skyappnet.scei.a-star.edu.sg
wildcard.dpo.a-star.edu.sg
p61lab.ns6.fusionfest.a-star.edu.sg
springer2.map.fastly.net
apps21b.ns0.fusionfest.a-star.edu.sg
incapsula.com
research.a-star.edu.sg
springer2.map.fastly.net
securenet.imcb.a-star.edu.sg
eprs.a-star.edu.sg
support.a-star.edu.sg
webmail.ibn.a-star.edu.sg
epprd06.a-star.edu.sg
careers.a-star.edu.sg
ns6-ghcpi.aci.a-star.edu.sg
*.gis.a-star.edu.sg
ns8survey.aci.a-star.edu.sg
sift.bii.a-star.edu.sg
lab.a-star.edu.sg
edocs.scei.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
prdap03.a-star.edu.sg
wildcard.gw68-220-ext.dpo.a-star.edu.sg
springer2.map.fastly.net
incapsula.com
fusionfest.a-star.edu.sg
mail.scei.a-star.edu.sg
justattach.imcb.a-star.edu.sg
webmail.gis.a-star.edu.sg
incapsula.com
ku.a-star.edu.sg
appsvc.a-star.edu.sg
incapsula.com
incapsula.com
*.ejproxy.a-star.edu.sg
incapsula.com
kmprdqp1.simtech.a-star.edu.sg
repo.simtech.a-star.edu.sg
support.acrc.a-star.edu.sg
*.a-star.edu.sg
ja-ns2.dpo.a-star.edu.sg
vpngw.a-star.edu.sg
edocs.scei.a-star.edu.sg
core.i2r.a-star.edu.sg
selfservice.a-star.edu.sg
*.ejproxy.a-star.edu.sg
researchers.a-star.edu.sg
Certificate
The complete raw certificate details for ns6a.aci.a-star.edu.sg in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISA/EnD3UiQNIi4LmoCz8MJVJ2MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDQwNTI5MzdaFw0yNDAzMDMwNTI5MzZaMCExHzAdBgNVBAMT Fm5zNmEuYWNpLmEtc3Rhci5lZHUuc2cwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDWemocXdQJ/Dmv6LsCtvMB5CWjdmlSzIY/OgrAsgXT44qZocQQWaM0 D6I1m14cWkWOpW5XBgR7BYGldnfhCVBp405/jPXZbKz7XjeqL8z7OyYFBfWWswzG JwLVo7RI0WWGJ1CVR5Yon1Rbu3Jpermt/rmlZZhN+ONy73WZzplJP8muUYef7d2M zQ/2mNAI0QqI8tRK3j4Kbc4eYVEnVq0xKP4dYhhjsXZTsBVXiy56ws4h6t+EMb9s TtZQRNYH4Blv2KhKvmnqz27LwQFcI9rc0zUv6PPd+XFZmpJV/ffja5s6bW8bk1L5 BkSdhhzxQ/N1SsHh8I58yG2P0+cm93sfVaK/xARDfDS+Sj3NmCTSUaJfNzxCeFE3 n/EtxWZTxh/Om389VgnMtnbX+O20kSINUQdb/bD8+oKLM53GPW8Z5Kt6Z8RW/Dxc hOM5hZSQ2Tg4LYluHs4R6qGkGaYtUWPLPz8t3kt3wsM7lEt9AyJggGSANotej/iV CygH5g8OmPzy+bGpO0920HFu/wfMN+GEKMPAEnCaK6OVi4eykNLTIz4XLWhopWRJ vQb58JPtcDQiBXImy/Ln9OplKn38TKl/vaXeHDhMeePlFv3UiDco6178tCEu7IM1 Y61QIzi1nmj0tqQGV5Jcrg5lPSWoRinuv68zSMSYCh97B7rbiDr3TQIDAQABo4IC GDCCAhQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRu+LRQ/nfAXlBpa4iVbm7P7tdL 1TAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAhBgNVHREEGjAYghZuczZhLmFjaS5h LXN0YXIuZWR1LnNnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGM M4SbywAABAMARzBFAiBk5IQHzlLlHtCfmIqjN4UosO8qwoq7mkREcYRWxKlEJAIh AOoNU4rbW8KNcHfh1Bk8bixzw7hEqoXII7NTODWP7YbvAHYAKdA6G7Z0qnEc0wNb ZVfBT4qni0/oOJRJ7KRT+US9JGgAAAGMM4SclQAABAMARzBFAiEAtmkBTaMk982j gHIoRk87fWToKoV4uNR4g5eB7J85JH0CIG1IU91xHr7HaiGFDgg52W79nygiZCoD dcTOMw+mzh2RMA0GCSqGSIb3DQEBCwUAA4IBAQBXPTb5Zllw7x1TXbpqICG4OeKg A51+AurR1t4gtXKW6Yqb+juJKUpdmSvjGn/boE6kTPTZ2mU0GR0z4oxVYp9ea2XW lbeXsEtVl80UMZdW6TULWBDWQR9yIAkv9U8nypLpAwaK3TGDw6bh1cj3HJWImF5b TS52expiKWQ+RDkZddVCnQ7xa0US8IURuQRokVtXixUrwsXj4Nuwkdf3duQz7qI9 dEQkTYX0iaKMCdbOdhagcMy46K8xUWWy+yTA5Vmg8QBntVY/Uq2qohsAHl40wjLB WVfMNn8pKzPOjip3FFW0DyfcbRhPNp6WZTKsDRLz6NLuDdqXLESuHXXV71FQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1npqHF3UCfw5r+i7Arbz AeQlo3ZpUsyGPzoKwLIF0+OKmaHEEFmjNA+iNZteHFpFjqVuVwYEewWBpXZ34QlQ aeNOf4z12Wys+143qi/M+zsmBQX1lrMMxicC1aO0SNFlhidQlUeWKJ9UW7tyaXq5 rf65pWWYTfjjcu91mc6ZST/JrlGHn+3djM0P9pjQCNEKiPLUSt4+Cm3OHmFRJ1at MSj+HWIYY7F2U7AVV4suesLOIerfhDG/bE7WUETWB+AZb9ioSr5p6s9uy8EBXCPa 3NM1L+jz3flxWZqSVf3342ubOm1vG5NS+QZEnYYc8UPzdUrB4fCOfMhtj9PnJvd7 H1Wiv8QEQ3w0vko9zZgk0lGiXzc8QnhRN5/xLcVmU8Yfzpt/PVYJzLZ21/jttJEi DVEHW/2w/PqCizOdxj1vGeSremfEVvw8XITjOYWUkNk4OC2Jbh7OEeqhpBmmLVFj yz8/Ld5Ld8LDO5RLfQMiYIBkgDaLXo/4lQsoB+YPDpj88vmxqTtPdtBxbv8HzDfh hCjDwBJwmiujlYuHspDS0yM+Fy1oaKVkSb0G+fCT7XA0IgVyJsvy5/TqZSp9/Eyp f72l3hw4THnj5Rb91Ig3KOte/LQhLuyDNWOtUCM4tZ5o9LakBleSXK4OZT0lqEYp 7r+vM0jEmAofewe624g6900CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343396828375271141608489676613121361662582 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 05:29:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 05:29:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ns6a.aci.a-star.edu.sg' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874994641375636017708879141240951171672937122303245584903715263299938438875091062395856462117832545220918031237591468417388840848831284519883986786779872057111756179865825292656980338406861978875638646667485940942354725288905053038259493589489845950872282575435942425861590696965965883129683375816357649256605488711857336343229374995914384866073381497571290036863910534787965717498966321520311971492491088911388109747181653585923983889461105094354026155838723426299006808115020687668284446525148840410819849341583109048521396388904278568579661793539164186811380813765934448996364669816380704748280076170425547376259529304390770988018250055987817170478516031934872515797143054122670503777546726357673174398789273965799607707820261547136607465979049384905083300468435473712871407525583061382747222433128116638747087991680110324032216890876198075239770747592930405408845874375998627536984099281644537567369842466340447625601766856094504094658177515022591158665225284302855994234988541673864911926471881377771981680631521038649727910307409394777848067426676037626628888127229935094955091043540809922718186755486451228684470930334512784379745204966351421436464270055279710690431037764254140691546483353241100117249340070879529576712304461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ef8b450fe77c05e50696b88956e6ecfeed74bd5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns6a.aci.a-star.edu.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c33849bcb0000040300473045022064e48407ce52e51ed09f988aa3378528b0ef2ac28abb9a4444718456c4a94424022100ea0d538adb5bc28d7077e1d4193c6e2c73c3b844aa85c823b35338358fed86ef00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c33849c950000040300473045022100b669014da324f7cda3807228464f3b7d64e82a8578b8d478839781ec9f39247d02206d4853dd711ebec76a21850e0839d96efd9f2822642a0375c4ce330fa6ce1d91 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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