vpn.stee.com.sg

- Singapore Technologies Electronics Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 15:f7:7a:0f:af:a2:13:39:00:00:00:00:50:e8:26:2b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Singapore Technologies Electronics Ltd

Organization: Singapore Technologies Electronics Ltd
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:f7:7a:0f:af:a2:13:39:00:00:00:00:50:e8:26:2b
Serial Number (int): 29198760932291232450924310006220727851
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 8b:56:15:ba:a3:da:b3:53:98:e6:87:6b:1b:55:4f:b4:5a:15:f3:b0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 85:2b:25:d1:7b:55:03:b9:ac:fe:1d:9e:95:46:fa:3a:de:44:ab:09
Fingerprint (sha256): 83:3f:b1:b1:68:3c:73:db:e7:eb:15:cd:ae:fb:91:d2:4e:ce:33:f3:9d:b0:27:19:66:cf:57:73:30:96:ae:7d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vpn.stee.com.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.stee.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.stee.com.sg

Other certificates including the domain name stee.com.sg

(limited to 100 certificates)
email.stee.com.sg
email.stee.com.sg
elms.stee.com.sg
email.stee.com.sg
ease.stee.com.sg
iss.stee.com.sg
email.stee.com.sg
vpn1.stee.com.sg
vpn.stee.com.sg
eservice.stee.com.sg
vpn.stee.com.sg
ease.stee.com.sg
elms.stee.com.sg
elms.stee.com.sg
email.stee.com.sg
vpn.stee.com.sg
elms.stee.com.sg
vpn.stee.com.sg
vpn.stee.com.sg
ease.stee.com.sg
email.stee.com.sg
ease.stee.com.sg
email.stee.com.sg
email.stee.com.sg

Certificate

The complete raw certificate details for vpn.stee.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcyh4w8ddUoV6rSvjTYH
8J4btRNEdYsjlpcI2VIf683Hi63j3cLDo/2Ypgyvu7bZQJA2fYMiaiu1lZcCbU7b
DANjYZ55PiIRvLo3akfvpLOTMfnPInZN6MdIYNGhCAQdh0ldhXn2y/mhQpN1H1F3
Lmx8GyT2jh0QmIveNbhYTBSrHRgGW7clkSs8h0NSSqLLMqTvCgbCRI0Z+o9iSZqJ
9NoAw5hDcFwyhrVkKnPp36KDD0BSpVn1H0snH1WwsA0ITlsw9uFURE0eXASvKNIZ
qvEk37IOA1//xEB0wo/tW6JuxWv1wzh+zzhmLVI3geGNHOYT6PdFdl02dQareB8W
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29198760932291232450924310006220727851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 08:34:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-27 09:04:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore Technologies Electronics Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.stee.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23959947621565949241201021329689227188324075761749591901449606715051624632622116598424326645188118577325189314950666131806072023865748892841070237622485794041855597973393032460853711358268095778275268508776521046161435393082312219004557036668541263110352173674117595594119984179684817161008004495020573948179292395313927318805786596037352922096337758070590096072137438960276810988648818752442428855505293031142202867903256133137829952788012978718327917177178323436915940615976624670510774979002994430521922291665085642245291386191771079159756845627731834815267983480625791559539752332311894614744456101759716174009991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.stee.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b5615baa3dab35398e6876b1b554fb45a15f3b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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