swsinterface.icmdev.mcf.gov.bc.ca

- Government of the Province of British Columbia -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1b:59:e1 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Government of the Province of British Columbia

Organization: Government of the Province of British Columbia
Organization unit: RP01
State / Province: British Columbia
Locality: Victoria
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1b:59:e1
Serial Number (int): 1276860897
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 6a:b3:76:be:2c:41:4d:45:25:f2:d2:aa:76:9d:9c:8c:22:f2:d2:75
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 2f:df:88:3f:6e:b5:42:ce:df:8c:cd:31:ab:37:91:42:36:95:d3:40
Fingerprint (sha256): 00:a5:84:1f:67:cf:26:a3:d3:15:d9:11:c7:6d:1c:8a:48:ac:f0:86:3b:d8:5b:76:4f:fd:9d:b5:fb:ab:d9:14

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate swsinterface.icmdev.mcf.gov.bc.ca

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swsinterface.icmdev.mcf.gov.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gov.bc.ca

(limited to 100 certificates)
EPBC.ServiceProviderPortal.gov.bc.ca
tst-dit.th.gov.bc.ca
carbonregistry.gov.bc.ca
test.ssbc-client.gov.bc.ca
livesmart.empr.gov.bc.ca
services.hub.gcpe.gov.bc.ca
dev.publicsectorcompensation.gov.bc.ca
gww.lcs.gov.bc.ca
www.mtonline.gov.bc.ca
uat.partners.aved.gov.bc.ca
hub.gcpe.gov.bc.ca
adminqa.bpms.gov.bc.ca
sun.gov.bc.ca
devcal.bcregistrynames.gov.bc.ca
vanity.blog.gov.bc.ca
eval.www.cladws.bcexpresspay.gov.bc.ca
ivos.gov.bc.ca
uat.hub.gcpe.gov.bc.ca
quality.www.ws2.bcexpresspay.gov.bc.ca
webmaps.gov.bc.ca
test.ucmdb.gov.bc.ca
hranalytics.gov.bc.ca
*.lab.pathfinder.gov.bc.ca
*.nrs.gov.bc.ca
idtest.gov.bc.ca
dev.bcregistrynames.gov.bc.ca
ptr.qp.gov.bc.ca
test.a100.gov.bc.ca
onlinelearning.gov.bc.ca
icm.ext.gov.bc.ca
*.ext.crm.mtics.gov.bc.ca
allstars.sdsi.gov.bc.ca
onestop.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
cares.pss.gov.bc.ca
news.gov.bc.ca
gis.hlth.gov.bc.ca
arcmaps.gov.bc.ca
www.sail.aved.gov.bc.ca
pacifico.cas.gov.bc.ca
b2b-prod-rt.vs.gov.bc.ca
test.my.gov.bc.ca
admin.dev.addresschange.gov.bc.ca
dev.bcregistryallservices.gov.bc.ca
jade.nrs.gov.bc.ca
gww.axis.gov.bc.ca
evss.vs.gov.bc.ca
d1.bconline.gov.bc.ca
testbni.gov.bc.ca
idtest.gov.bc.ca
geobc.gov.bc.ca
eservice.ag.gov.bc.ca
proje.realbc.gov.bc.ca
ehealth.gov.bc.ca
fwxwww2.hpr.for.gov.bc.ca
cloud.gov.bc.ca
test.livelink.gov.bc.ca
gww.tacs.gov.bc.ca
11520560.peerly.app
sws.interface.mcf.gov.bc.ca
hambc.hlth.gov.bc.ca
dev.services.hub.gcpe.gov.bc.ca
testbni.gov.bc.ca
billing-and-payment.revenueservicesbc.gov.bc.ca
test.a100.gov.bc.ca
gww.svn.educ.gov.bc.ca
dir.gov.bc.ca
test.addresschange.gov.bc.ca
intra.dir.gov.bc.ca
wsidmngr.gov.bc.ca
sbcstatus.id.gov.bc.ca
rptp.bcas.gov.bc.ca
emis.hlth.gov.bc.ca
abesap.teamwork.gov.bc.ca
sandbox.realbc.gov.bc.ca
www.pp.qp.gov.bc.ca
gww.blog.gov.bc.ca
drp.icm.ext.gov.bc.ca
gww.gov.bc.ca
alpaca.status.merchlogix.com
pp.qp.gov.bc.ca
cdwtest.mcf.gov.bc.ca
77000.gov.bc.ca
appsd1.bconline.gov.bc.ca
idtest.gov.bc.ca
www.reportfraud.gov.bc.ca
pingu.lab.ag.gov.bc.ca
www.ears.gov.bc.ca
earlychildhoodeducator.mcf.gov.bc.ca
*.bcstats.gov.bc.ca
sdc.gov.bc.ca
test.bcregistryallservices.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
Adopttrain.mcf.gov.bc.ca
3ds-status.outseer.com
*.orgbook.gov.bc.ca
tst.posse.th.gov.bc.ca
blog.gov.bc.ca
heat.myeducation.gov.bc.ca
dev.addresschange.gov.bc.ca

Certificate

The complete raw certificate details for swsinterface.icmdev.mcf.gov.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJQ2Ds+2cz+hXtUKnnGZ
0+n+HMi+bR1rMOwb71WmDGIvL9Lhk6OliJmlQGeOcFxpbmbldpdozAfLuCeCvEOo
kwnmqZodixo77Xa2dCLdxyKeZnmgxyLcaMfBgN0sshReRMdPw9Sk87ZPdA/jSuqM
Z1FL3OOaDFYcgvTnWVatKk/JydO0MN57pfqh9m2IzuTi/JBHPHN0l/SK13mZfqJ3
ElzVLZrhl3ZDlDiJ7B3l22Ppr9wF6R8PrcrzPENwlaEVrN+Prc4Agdiaa3CgGZjS
HnQ9dFybOdbfZrudD8Oy1w1IU6jQAxrvis6VX2phTNypyAwrkEL9YXnXszhl0c6j
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276860897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-12 18:15:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-13 02:07:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of the Province of British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RP01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swsinterface.icmdev.mcf.gov.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25825699861739056544432424274747772183812687785683482497196147660374383810606966792759286208800367351686472851397517069089716792635355268044795137487959425090531960119693034158723452841456936199284373343230317861304361803891264648627437012004709837014462124803227228820793242730534381271955639977464393136156290764433166825083777392179787585618229354955177845898184855363532142259262669768053359853827317190974119266048690363616528069360394278388270241970397455684180224379941675464120167375318354750825224978658314114627730458492468321861584452877305932821660691519871071952755139746399510034404725896229546244350743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ab376be2c414d4525f2d2aa769d9c8c22f2d275
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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