*.aws.mpac.ca

- Municipal Property Assessment Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1d:bc:83:6e:c4:0c:5a:9f:00:00:00:00:50:e4:32:32 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Municipal Property Assessment Corporation

Organization: Municipal Property Assessment Corporation
Organization unit: Information Technology
State / Province: Ontario
Locality: Pickering
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:bc:83:6e:c4:0c:5a:9f:00:00:00:00:50:e4:32:32
Serial Number (int): 39526429458597059827111585447175008818
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 2e:03:f6:e3:75:b9:5b:c3:89:bb:53:43:50:1e:ce:16:d7:ac:fd:5a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b6:43:ac:22:fc:02:be:b1:91:b0:52:da:d4:9c:6c:46:9b:85:38:40
Fingerprint (sha256): 07:72:c2:d6:f9:db:7c:61:75:c1:df:eb:39:fe:2d:1f:b7:f8:1c:88:91:44:7c:f0:c3:9c:34:3b:ee:d9:57:07

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.aws.mpac.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aws.mpac.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aws.mpac.ca

Other certificates including the domain name mpac.ca

(limited to 100 certificates)
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
b2buat.mpac.ca
*.aws.mpac.ca
soporte.cjgconsultores.com
support.akylade.com
acs-online.mpac.ca
it-helpdesk.hccom.org
guestportal.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
*.aws.mpac.ca
it.oodc.com.ph
services.mpac.ca
*.aws.mpac.ca
*.aws.mpac.ca
desk.mpac.ca
*.aws.mpac.ca
adfs.mpac.ca
*.aws.mpac.ca
b2b.data.mpac.ca
it.oodc.com.ph
services.mpac.ca
servicedesk.aws.mpac.ca
mpac.prd.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
guestportal.mpac.ca
support.spidercost.com
help.tradetechnica.com
apps.mpac.ca
*.aws.mpac.ca
quiz.apexstrategygroup.org
*.aws.mpac.ca
b2b.data.mpac.ca
ra.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
apps2.mpac.ca
support.cosmicktechnologies.com
instream.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
blackduck.aws.mpac.ca
helpdesk.al-mozon.com
api-acs-online.mpac.ca
support.45z.net
casper.mpac.ca
b2b.web.mpac.ca
helpdesk.ie-launch.com
help.tradetechnica.com
mgmttun.mpac.ca
support.thebestclaims.com
sightline.mpac.ca
b2b.web.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
support.cosmicktechnologies.com
survey.makusafe.com
sclearpasslab.prd.mpac.ca
www.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
*.k8s.mpac.ca
servicesuat.mpac.ca
support.foodaccessportal.org
apps2.mpac.ca
ClarityConnect.mpac.ca
mpac.ca
*.aws.mpac.ca
www.axi.sierraleone.mpac.ca
aws.mpac.ca
test1.mpac.ca
aaa.mpac.ca
sap-ec-npr-02.prd.mpac.ca
support.45z.net
annualreport.mpac.ca
apps2.mpac.ca
support.cosmicktechnologies.com
support.cosmicktechnologies.com
guestportal.mpaclab.net
anyconnect.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
sap-ec-prd-01.prd.mpac.ca
guestportal.mpac.ca
it.tnsos.help
it-helpdesk.hccom.org
webtrends.mpac.ca
api-acs-online1.mpac.ca
mpac.ca
servicedesk.mpac.ca
lync01.um.mpac.ca
portal.mpac.ca

Certificate

The complete raw certificate details for *.aws.mpac.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mxQXyGaIz7w5G2V/4+V
WMGz9+TE5r/gNq/GeNp0v7/X9rL0grclNQmKf5smxEQIYLU4dl8Alh27+YAHIdmG
bscmZdTZ85tLWYTWRGmVRRFRjG/PKCuRHK6od7xnfcUbP44TpRlQ24UOyrAJPJEZ
2z6lPdldnoyCm0YkOLBO89E1yEgGF8cpXhnEYbWwi4p3XSzoOEA7rZFjuAzntONK
Tj/+dgZNMkdU+jU7R/GiL0WggAKwYprqMcZ+AWByAAXZu+Vp7hI0JEnEZjHuvEXo
Ve7Dmi+wg+ZFEMuCGGfIKdqftnDS1bqoyo9J9wJXEc/jqVXgym5Z/9vOg5LLU/aD
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39526429458597059827111585447175008818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-25 18:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 18:38:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pickering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Municipal Property Assessment Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aws.mpac.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27068408862942091581119744921329775790226701278921390885814064827124239260765766603141732009275603389578777303894461581598875023800515481155916359270117241116546196058943763881773822287995969541000485478649471692070502814994225049925650942604032403845563742389637272808814294466465085593177951585666347447445679611412537639362167233413591446714326902050644074098119692338877987371220565754599050208595928989097415597732405071446304119705354812197937397529115957148839966039336533161537174632124436191051008487044608913152989985373781702490937500124930937841334924167547063197143408616260059930190541652496388015424501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.mpac.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e03f6e375b95bc389bb5343501ece16d7acfd5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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