learnet2.ns.sg

- Defence Science and Technology Agency -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 54:cc:18:d0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Defence Science and Technology Agency

Company registration number: T08GB0011A
Organization: Defence Science and Technology Agency
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 54:cc:18:d0
Serial Number (int): 1422661840
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 2f:d8:60:90:38:d1:18:b8:2b:80:ce:9e:f6:48:f5:36:be:0f:3a:03
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 52:de:b4:c9:78:4a:a5:15:d4:fc:4d:5f:8c:4f:0e:78:98:6d:e1:47
Fingerprint (sha256): 69:35:5a:d7:7e:f5:81:a2:86:9e:20:1e:83:5d:44:64:15:97:6c:77:ca:61:1d:70:8b:a2:b9:1b:29:58:1b:8d

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate learnet2.ns.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learnet2.ns.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learnet2.ns.sg

Other certificates including the domain name ns.sg

(limited to 100 certificates)
www.ns.sg
wsg.ns.sg
learnet2.ns.sg
crm.ns.sg
www.ns.sg
m.www.ns.sg
intranet2.ns.sg
learnet2.ns.sg
www.ns.sg
crm.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
mobile.www.ns.sg
mobile.www.ns.sg
crm.ns.sg
learnet2.ns.sg
lifestyle.www.ns.sg
intranet.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
m.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
www.ns.sg
nsconnect.www.ns.sg
learnet2.ns.sg
www.ns.sg
learnet2.ns.sg
www.ns.sg
intranet.stg.ns.sg
www.ns.sg
m.ns.sg
learnet.ns.sg
www.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
intranet.ns.sg
wsg.ns.sg
intranet.ns.sg
learnet.ns.sg
intranet.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
intranet2.ns.sg
intranet2.ns.sg
www.ns.sg
learnet.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
intranet.stg.ns.sg
learnet2.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
crm.ns.sg

Certificate

The complete raw certificate details for learnet2.ns.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VGQfBCoNYEJuT3rB6xK
v4Oilqz632FC/1rRhpQqHgKpdIrOjVgjt0TQcJOwbm6SNIOxJsHQOR9kErwjx348
fpB387EfrZeo/2aXTzESrqhIWa+WObJrpC4xvJbrBKclzx9MaHngCy3Gv2Vc7O19
Oie5S20qoWeqtoEBpimdvVWKV3LtUE+Jb1dVkvY/nKbi/L4q5IpxD+QXwzg17vCU
Ljx9FN1s1re8ABHFs9kfAxjY6+PW6E0LUZ/8QRI0RhnHfdduhGmNYbKEyTKjJYZu
uBnMt4d7ZW3LZoGLGr040NEPOwaCUc5cJtRyTDOLsGfMf3HiAjH7wDv0/JVYh5Yb
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1422661840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-08 01:04:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-28 03:04:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Defence Science and Technology Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T08GB0011A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learnet2.ns.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30968605617966952797657767831274088515479801647266236545642857691625190771799492691650246444985224198071768215054038428373190623935401625274205406472017208864161953768235642290036665289559528576943741749596091790690607833860396325052276114722607820621339989505287796222257055288490495926896633884461333037564351757352195470125676900653660764154638990615570232796339068748867014502628546798170288559615558280647065687404305193907466082199352632172456973581971933026152948655804554268132090623295727423801420281351161838742951253850394917326582633115380729239416048181623994122472119625545441327404882770430125145463603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnet2.ns.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fd8609038d118b82b80ce9ef648f536be0f3a03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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