learnet2.ns.sg

- Defence Science and Technology Agency -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number f8:d1:bf:78:9e:c7:00:e6:00:00:00:00:54:cd:50:d8 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Defence Science and Technology Agency

Company registration number: T08GB0011A
Organization: Defence Science and Technology Agency
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f8:d1:bf:78:9e:c7:00:e6:00:00:00:00:54:cd:50:d8
Serial Number (int): 330737616494845926667905478851503673560
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 65:fb:1e:15:4e:e2:2b:37:f4:a0:ce:a4:0e:44:29:54:62:b3:3a:f7
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 66:08:1c:90:c2:03:2e:a8:9e:91:b7:70:72:33:e0:c2:35:95:7a:77
Fingerprint (sha256): d5:7f:83:ac:53:9e:fb:54:b8:c9:2e:c7:6f:e5:a2:30:a0:2d:83:32:2e:9a:ee:88:46:51:dd:fd:f3:9f:90:bc

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate learnet2.ns.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learnet2.ns.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learnet2.ns.sg

Other certificates including the domain name ns.sg

(limited to 100 certificates)
www.ns.sg
wsg.ns.sg
learnet2.ns.sg
crm.ns.sg
www.ns.sg
m.www.ns.sg
intranet2.ns.sg
learnet2.ns.sg
www.ns.sg
crm.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
mobile.www.ns.sg
mobile.www.ns.sg
crm.ns.sg
learnet2.ns.sg
lifestyle.www.ns.sg
intranet.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
m.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
www.ns.sg
nsconnect.www.ns.sg
learnet2.ns.sg
www.ns.sg
learnet2.ns.sg
www.ns.sg
intranet.stg.ns.sg
www.ns.sg
m.ns.sg
learnet.ns.sg
www.ns.sg
www.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
www.ns.sg
www.ns.sg
m.www.ns.sg
www.ns.sg
intranet.ns.sg
wsg.ns.sg
intranet.ns.sg
learnet.ns.sg
intranet.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
intranet2.ns.sg
intranet2.ns.sg
www.ns.sg
learnet.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
intranet.stg.ns.sg
learnet2.ns.sg
www.ns.sg
ivrs.intranet.ns.sg
www.ns.sg
learnet2.ns.sg
learnet2.ns.sg
crm.ns.sg

Certificate

The complete raw certificate details for learnet2.ns.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2fxHVi/Zxh1kUOLLRH
J0bYccrYrgK/Aw17ei6h2Ckbh0BKfcR+FlQieyu7OPiMo75rUIZiQ7pCWnztqgpx
P1c856K+5CuHrAVufQgae0oY7QyAucAODbfKkkqGwAEf6ssQKidYgVoX6uMVd/kZ
PVerWiIC6Ov4aDMDO6UJ+BHwRyyA6i6awu+gXuHJrZ1e+43qqTzaRWRQeUCWJ4qo
dj/mBH4lMiItszpgljHPOh9oIWMy8OL+n1jvdQ313bxU1nVvldr9mkVwczMOYwjP
ML+hGYN5vcHCS3ezVLOGw5TaaSkWQWdemghhtFBk/uLYizlFQB4HNqlVXt80Iy+0
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330737616494845926667905478851503673560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-03 00:52:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 01:22:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Defence Science and Technology Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T08GB0011A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learnet2.ns.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19873471533931153893371528144208661656522522293332676353120698985319020286491686199833800086556053879015932583660592950579391942844554741162883157341551482650092957631935594028868031101801866432640466195099433640575648852151588181456501261721911231037922144098303011966855169510690206204456755779200031476302117861399614759706382301441092467715141823887059671291279894017614475034809351467477614985656430259813272910332269323258762850829570373376198717198067652251369469668073256895692119441245131022715215502803935018018700874462277086927351562838750998892797209491236741507699828755664547348837315153801566447711331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnet2.ns.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65fb1e154ee22b37f4a0cea40e44295462b33af7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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