www.ns.sg

- Ministry of Defence -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 55:24:e9:ee:2c:7c:b4:11:13:6a:57:e1:29:6d:e0:bf was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministry of Defence

Company registration number: T08GA0011B
Organization: Ministry of Defence
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:24:e9:ee:2c:7c:b4:11:13:6a:57:e1:29:6d:e0:bf
Serial Number (int): 113176047000133529800303815054272094399
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 68:a1:3b:c5:0a:51:9c:cd:0f:24:f9:b9:85:43:83:23:87:57:2f:a3
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 4b:52:20:db:fe:f5:8d:41:fb:e3:56:78:5c:a7:a2:b4:58:07:7f:f6
Fingerprint (sha256): 1d:95:7e:88:1d:50:c8:63:a7:a0:7f:7b:0f:f1:69:0d:9d:c4:0b:0b:3b:5d:49:12:0d:b5:c3:b5:e8:99:f3:de

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www.ns.sg

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ns.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ns.sg
ns.sg
cmpb.gov.sg
mindef.gov.sg
SCHOLAR.MINDEF.gov.sg
www.ACCORD.gov.sg
www.AIRFORCE.gov.sg
www.ARMY.gov.sg
www.ARMYCAREERS.gov.sg
www.cmpb.gov.sg
www.mindef.gov.sg
www.NAVY.gov.sg
www.NAVY.sg
www.NAVYCAREERS.gov.sg
www.NSMARK.sg
www.nssquare.sg
www.RSAF.gov.sg
www.RSN.gov.sg
www.SAF.gov.sg
www.STRENGTHENINGNS.sg
www.STRENGTHENNS.sg
www.TOTALDEFENCE.gov.sg
www.TOTALDEFENCE.sg

Other certificates including the domain name ns.sg

(limited to 100 certificates)
www.ns.sg
wsg.ns.sg
learnet2.ns.sg
crm.ns.sg
www.ns.sg
m.www.ns.sg
intranet2.ns.sg
learnet2.ns.sg
www.ns.sg
crm.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
mobile.www.ns.sg
mobile.www.ns.sg
crm.ns.sg
learnet2.ns.sg
lifestyle.www.ns.sg
intranet.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
m.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
www.ns.sg
nsconnect.www.ns.sg
learnet2.ns.sg
www.ns.sg
learnet2.ns.sg
www.ns.sg
intranet.stg.ns.sg
www.ns.sg
m.ns.sg
learnet.ns.sg
www.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
intranet.ns.sg
wsg.ns.sg
intranet.ns.sg
learnet.ns.sg
intranet.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
intranet2.ns.sg
intranet2.ns.sg
www.ns.sg
learnet.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
intranet.stg.ns.sg
learnet2.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
crm.ns.sg

Certificate

The complete raw certificate details for www.ns.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N8ebzKyO4Gu60OXTa1a
QmPZE4t7+qyAPa6Pz0F6ECromaiLk9ZmmW6LIrC+iYTj1MEO2SUyDTmBtROMV+7y
L6ZJyou2vAm8YUb73YeGRMYFTaw8yhC9hCHKnmF/XINFo69eJIhCU2pWoceYxvs9
gm+R6fa0cAnGp2MG8DxEGK7cnFnmjpBMhEmnFU9xQvWv3+TNQQlGsvFUtONrXKm0
MDEA+nqrixLxhMXdAidMK2lfMvSvLN7QvWElU3bfe9nJhpHWyY5tAm8rsMWRWLse
lJ3B4t8GtSZUQG+UXqfkXBe83pi7T/M2roQmrYKfUoSHvcomipwzl+rvLzIKAUhU
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113176047000133529800303815054272094399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 15:48:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 15:48:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministry of Defence'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T08GA0011B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ns.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27882451115006722795408765821464290854140721123583443306222452079843340752139499882590104418142877587002409219403581867103918881640748018430956249550184725532122963999054231834148005614887251945786237947310586440903070261071442338929311254339230312870082204843533137312595409563468064520771462850930001111832840162374961037213132298079647236706175994896422929910996224165739822622292313750845722504322673978889940863812633681115804516806540052147420176670890205854044569345774252672069770067296292002156447266764585087340675667242450742420827158512769703907529699488587384971053405458082909902966439965274496574182527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68a13bc50a519ccd0f24f9b98543832387572fa3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ns.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpb.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindef.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SCHOLAR.MINDEF.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ACCORD.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.AIRFORCE.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ARMY.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ARMYCAREERS.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmpb.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindef.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVY.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVY.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVYCAREERS.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NSMARK.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nssquare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.RSAF.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.RSN.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.SAF.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.STRENGTHENINGNS.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.STRENGTHENNS.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TOTALDEFENCE.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TOTALDEFENCE.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001806bb5bdee00000403004630440220644a825faf0b3d47bd2957a89c9aae6cc26f2e17bef0e850f7ee9eef6b8e5ae102207773e7cb76adbe0d393b03ac10d1b943faccdd9b7ff0990feb391db9c4996c5f007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001806bb5be0e0000040300473045022100f4caf410222612d16e761c8145027bece197813cab6144715b0ec57dc48d0f75022067eb13f4c8e76a04208946ada5ae1bfc0f0a62654681ec6f53515a99577499d4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001806bb5be05000004030047304502207b6d332b5cca3f612099d1b4345dbb0139c3f5b6f6d9e2eb4be8f1fa0c47930d022100e4bac44a742f95fcb39d54fba21bc7f6878e03e9563060f914d4d2428b45d731
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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