www.ns.sg

- Ministry of Defence -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 7c:a4:d1:25:40:be:de:c2:6c:e4:16:61:37:12:63:96 was issued on by Entrust, Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ministry of Defence

Company registration number: T08GA0011B
Organization: Ministry of Defence
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7c:a4:d1:25:40:be:de:c2:6c:e4:16:61:37:12:63:96
Serial Number (int): 165680050137216244684217005169448215446
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 95:27:df:65:89:ef:6d:6c:a1:ce:92:7f:34:74:99:e7:7e:b2:97:b8
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 16:d0:fa:3a:16:8f:6e:be:6e:4b:6e:64:a0:14:9d:92:e2:00:36:6e
Fingerprint (sha256): 79:ac:28:19:4b:f6:6f:1e:8c:52:f8:bd:37:4e:65:d5:df:08:71:e7:50:1c:86:b7:f3:a6:d6:90:c0:46:67:14

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www.ns.sg

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ns.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ns.sg
ns.sg
mindef.gov.sg
cmpb.gov.sg
www.TOTALDEFENCE.sg
www.TOTALDEFENCE.gov.sg
www.STRENGTHENNS.sg
www.STRENGTHENINGNS.sg
www.SAF.gov.sg
www.RSN.gov.sg
www.RSAF.gov.sg
www.nssquare.sg
www.NSMARK.sg
www.NAVYCAREERS.gov.sg
www.NAVY.sg
www.NAVY.gov.sg
www.mindef.gov.sg
www.discareers.gov.sg
www.cmpb.gov.sg
www.ARMYCAREERS.gov.sg
www.ARMY.gov.sg
www.AIRFORCE.gov.sg
www.ACCORD.gov.sg
SCHOLAR.MINDEF.gov.sg

Other certificates including the domain name ns.sg

(limited to 100 certificates)
www.ns.sg
wsg.ns.sg
learnet2.ns.sg
crm.ns.sg
www.ns.sg
m.www.ns.sg
intranet2.ns.sg
learnet2.ns.sg
www.ns.sg
crm.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
mobile.www.ns.sg
mobile.www.ns.sg
crm.ns.sg
learnet2.ns.sg
lifestyle.www.ns.sg
intranet.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
m.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
www.ns.sg
nsconnect.www.ns.sg
learnet2.ns.sg
www.ns.sg
learnet2.ns.sg
www.ns.sg
intranet.stg.ns.sg
www.ns.sg
m.ns.sg
learnet.ns.sg
www.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
intranet.ns.sg
wsg.ns.sg
intranet.ns.sg
learnet.ns.sg
intranet.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
intranet2.ns.sg
intranet2.ns.sg
www.ns.sg
learnet.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
intranet.stg.ns.sg
learnet2.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
crm.ns.sg

Certificate

The complete raw certificate details for www.ns.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIlDCCB3ygAwIBAgIQfKTRJUC+3sJs5BZhNxJjljANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0y
NDA0MjIxNTQwMDdaFw0yNTA0MjcxNTQwMDVaMIGZMQswCQYDVQQGEwJTRzESMBAG
A1UEBxMJU2luZ2Fwb3JlMRMwEQYLKwYBBAGCNzwCAQMTAlNHMRwwGgYDVQQKExNN
aW5pc3RyeSBvZiBEZWZlbmNlMRowGAYDVQQPExFHb3Zlcm5tZW50IEVudGl0eTET
MBEGA1UEBRMKVDA4R0EwMDExQjESMBAGA1UEAxMJd3d3Lm5zLnNnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uyOtucUoqApe7jNun/uQ7ZMtwIIAREJ
x4ugM52AFfCY9/UCpqYOw2Gx8HoalhITP1pgkRNu0R5KdnmvHRSVAHvNm+6PHiYU
06gUQCJRkSA/Aa8cVX6H6MJ4vQaCu8ZMKdAXIMu+yB0sW+1ZbiArcJesCUf0p+Ew
89ttLe0IrAWyEtygiPalr0woVhR78dwBKuZuMW6kHC+prnLTihhS5CkAcsEgrOAD
uufZSfjj0tP8KU0LzRNKnFjENO3UgFq6erierLrXU+0sVDKJbjptvPzOgzK0drbm
EiAlj1C8EtANbnzvo/VmoeR/6+XwFl3bcMjthxWO4xBlrDe5tuCMywIDAQABo4IE
szCCBK8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUlSffZYnvbWyhzpJ/NHSZ536y
l7gwHwYDVR0jBBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzowaAYIKwYBBQUHAQEE
XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF
BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMW0tY2hhaW4yNTYuY2VyMDMG
A1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxbS5j
cmwwggHABgNVHREEggG3MIIBs4IJd3d3Lm5zLnNnggVucy5zZ4INbWluZGVmLmdv
di5zZ4ILY21wYi5nb3Yuc2eCE3d3dy5UT1RBTERFRkVOQ0Uuc2eCF3d3dy5UT1RB
TERFRkVOQ0UuZ292LnNnghN3d3cuU1RSRU5HVEhFTk5TLnNnghZ3d3cuU1RSRU5H
VEhFTklOR05TLnNngg53d3cuU0FGLmdvdi5zZ4IOd3d3LlJTTi5nb3Yuc2eCD3d3
dy5SU0FGLmdvdi5zZ4IPd3d3Lm5zc3F1YXJlLnNngg13d3cuTlNNQVJLLnNnghZ3
d3cuTkFWWUNBUkVFUlMuZ292LnNnggt3d3cuTkFWWS5zZ4IPd3d3Lk5BVlkuZ292
LnNnghF3d3cubWluZGVmLmdvdi5zZ4IVd3d3LmRpc2NhcmVlcnMuZ292LnNngg93
d3cuY21wYi5nb3Yuc2eCFnd3dy5BUk1ZQ0FSRUVSUy5nb3Yuc2eCD3d3dy5BUk1Z
Lmdvdi5zZ4ITd3d3LkFJUkZPUkNFLmdvdi5zZ4IRd3d3LkFDQ09SRC5nb3Yuc2eC
FVNDSE9MQVIuTUlOREVGLmdvdi5zZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwBwYFZ4EMAQEwNwYKYIZI
AYb6bAoBAjApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy5lbnRydXN0Lm5ldC9y
cGEwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AKLjCuRF772tm3447Udnd1PX
gluElNcrXhssxLlQpEfnAAABjwZ26RcAAAQDAEcwRQIhAJ4YvvYKJ0qrwyZHKein
ymM1TTZ0w6F3xQuFPhXFrS04AiBkhoa1tS00QTuc4VAxSqexKsqv5qDIMV3sL1kq
jydn9QB1AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjwZ26TgA
AAQDAEYwRAIgV1FphZXM1G2HHbwLtN0O8aW+yMqKYha90FtThEelIv0CIGcplauG
RRdoYhWqbmPJx4uqpsYTryAQnBjf9qwjKhK7AHcATnWjJ1yaEMM4W2zU3z9S6x3w
4I4bjWnAsfpksWKaOd8AAAGPBnbpPQAABAMASDBGAiEApeFCgH7597K6UoZpsiDE
yPE1Xce20NYa6+HNrRiqY4ICIQDAL2BR8ngEDcDoI5mupdWm7jRLQITATmmB2aO/
OlMFsjANBgkqhkiG9w0BAQsFAAOCAQEAB2F8ISgNhNhIImDV9hShgAzu67Msf+1E
MgSdsyArp/nTS98SB5qP/ARaWcryZoNTvqCKAvMA34QxyLrzvICGG9mfFa9gQm77
vTSPZRhy+4LfDnvOFDZPBoM+iafrcJDLcZlhZPWhDL1HB6b9/Q/lhZn1ycp0cqse
8BHzNVlXpmHpImXCxVFgM0hxUGRhzsiGK4TcWh6qUJTQLIFi1H/AaU3MktPygzdv
Dcjy/V3u/dNLFl576e3qYB4pZEwCC8JK2lkcFqsEV6fMAPYCfHVQkaxW4JA1xxoL
kU+uuqyxGNiIW3cuZDYRYhxosEXuBLEU25iyAxpqfAr4JNvYeOpFMw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uyOtucUoqApe7jNun/u
Q7ZMtwIIAREJx4ugM52AFfCY9/UCpqYOw2Gx8HoalhITP1pgkRNu0R5KdnmvHRSV
AHvNm+6PHiYU06gUQCJRkSA/Aa8cVX6H6MJ4vQaCu8ZMKdAXIMu+yB0sW+1ZbiAr
cJesCUf0p+Ew89ttLe0IrAWyEtygiPalr0woVhR78dwBKuZuMW6kHC+prnLTihhS
5CkAcsEgrOADuufZSfjj0tP8KU0LzRNKnFjENO3UgFq6erierLrXU+0sVDKJbjpt
vPzOgzK0drbmEiAlj1C8EtANbnzvo/VmoeR/6+XwFl3bcMjthxWO4xBlrDe5tuCM
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165680050137216244684217005169448215446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 15:40:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-27 15:40:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministry of Defence'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T08GA0011B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ns.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28646507762551371887880698525091200890097178405536651121798386295185258721496540101490506992266628293792550050006056351809422612578799239961167441894670477703395953758286154357037578824604752511941037438415389878187453462890142612586225431580847610880922575756947216431981391491789091490994063885734545355504734293466943966707741556240110404033950179098283592000274651993606926650322663694672355200612890609473013782202185895761538993223518572457334543174635066025047753051828378646075034089855774900082947668640045597266326255775811994275058008171970050122925329385322747834036912089492867262827375923184270183533771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9527df6589ef6d6ca1ce927f347499e77eb297b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ns.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindef.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpb.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TOTALDEFENCE.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TOTALDEFENCE.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.STRENGTHENNS.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.STRENGTHENINGNS.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.SAF.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.RSN.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.RSAF.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nssquare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NSMARK.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVYCAREERS.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVY.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.NAVY.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindef.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discareers.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmpb.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ARMYCAREERS.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ARMY.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.AIRFORCE.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ACCORD.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SCHOLAR.MINDEF.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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