nrs2.gov.mb.ca

- Department of Finance (Province of Manitoba) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 24:7a:62:69:ed:ae:43:55:00:00:00:00:50:f2:ba:fd was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Finance (Province of Manitoba)

Organization: Department of Finance (Province of Manitoba)
State / Province: Manitoba
Locality: Winnipeg
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:7a:62:69:ed:ae:43:55:00:00:00:00:50:f2:ba:fd
Serial Number (int): 48487664133655060643474094172069346045
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ec:14:cc:b3:21:a4:fe:26:4f:cf:49:cc:55:88:62:f9:03:f6:50:b2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6b:52:d4:ad:df:c4:60:8f:75:b5:90:80:dc:a9:8d:3f:27:7f:05:87
Fingerprint (sha256): 1f:bb:29:46:93:6a:7d:98:b3:c3:6e:7a:2e:48:08:6e:c2:10:22:df:f5:41:7e:30:7a:38:44:b4:2b:48:77:c2

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate nrs2.gov.mb.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nrs2.gov.mb.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nrs2.gov.mb.ca

Other certificates including the domain name gov.mb.ca

(limited to 100 certificates)
wag.weblink.gov.mb.ca
manitoba.ca
transfer.gov.mb.ca
mitqa.gov.mb.ca
web16.gov.mb.ca
sprs.weblink.gov.mb.ca
PRODCPSMPIWS.gov.mb.ca
web16.gov.mb.ca
web7.gov.mb.ca
edu.gov.mb.ca
taxcess.gov.mb.ca
web7.gov.mb.ca
edu.gov.mb.ca
webmail.me.mbgov.ca
childcaresearch.gov.mb.ca
NRS-MBVSB-sig-uat-202301.gov.mb.ca
www2.gov.mb.ca
gov.mb.ca
wpgmlir1.imr.gov.mb.ca
weblink.gov.mb.ca
Access1.gov.mb.ca
web2.gov.mb.ca
direct.gov.mb.ca
edu.gov.mb.ca
NRS-MBVSA-enc-prod-201905.gov.mb.ca
rtb.gov.mb.ca
OnlineChildCareRegistry.gov.mb.ca
mit.gov.mb.ca
nrs-mbvsb-sig-uat.gov.mb.ca
nrs2.gov.mb.ca
prsltl.gov.mb.ca
edu.gov.mb.ca
edu.gov.mb.ca
sslaccess.gov.mb.ca
vema.gov.mb.ca
securelink1.gov.mb.ca
direct3.gov.mb.ca
edu.gov.mb.ca
manitoba.ca
gentax.gov.mb.ca
nrs.gov.mb.ca
direct3.gov.mb.ca
library.edu.gov.mb.ca
PROD.TRACS.gov.mb.ca
edu.gov.mb.ca
mit.gov.mb.ca
companiesonline.gov.mb.ca
edu.gov.mb.ca
sis.gov.mb.ca
awseg03.gov.mb.ca
NRS-MBVSA-sig-prod-201905.gov.mb.ca
nrs-mbvsb-enc-uat.gov.mb.ca
webmail.me.mbgov.ca
mli2.gov.mb.ca
webmail.gov.mb.ca
edu.gov.mb.ca
NRS-MBVSA-enc-prod-201905.gov.mb.ca
*.manitoba.ca
manitoba.ca
securelink.gov.mb.ca
edu.gov.mb.ca
direct-hod.gov.mb.ca
manitoba.ca
manitoba.ca
mli2.gov.mb.ca
wag.weblink.gov.mb.ca
reg.gov.mb.ca
prsasr.gov.mb.ca
web15.gov.mb.ca
mit.gov.mb.ca
transfer.edu.gov.mb.ca
securelink2.gov.mb.ca
wpgmlir6.imr.gov.mb.ca
wpgmlir3.imr.gov.mb.ca
web16.gov.mb.ca
uat.direct.gov.mb.ca
manitoba.ca
securelink.gov.mb.ca
NRS-MBVSB-enc-uat-202301.gov.mb.ca
antispam.gov.mb.ca
wpgmlir5.imr.gov.mb.ca
NRS-MBVSA-sig-prod-201905.gov.mb.ca
taxcess.gov.mb.ca
web5.gov.mb.ca
weblink.gov.mb.ca
direct.gov.mb.ca
Access1.gov.mb.ca
app6.gov.mb.ca
securelink4.gov.mb.ca
www.gov.mb.ca
web4.gov.mb.ca
nrs-mbvsa-sig-prd.gov.mb.ca
awcg01.gov.mb.ca
LYNCPOOL01.ME.MBGOV.CA
nrs.gov.mb.ca
direct3.gov.mb.ca
app6.gov.mb.ca
reg.gov.mb.ca
web6.gov.mb.ca
wag.weblink.gov.mb.ca

Certificate

The complete raw certificate details for nrs2.gov.mb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fsJKrOat58U+oSLFFhF
Cex+bnFlUB+GMdKhKudELMlCx81iIIMB6PDJgLTPQEDcqIEy+3/F2R9j/50ttIyR
9oj7iZYkYpZU+454yimuVZ6UGJN4GGmPR1mpBLhv0sjOipcwHirQ4dm0zbYFB4wy
OcNu3v73wL1C8no85jhT3+8HVy9blZLt9IqGYqFLadxJu/XlR375RKAjcGe6aoUZ
r5bluWXlxC8lts/4cMIa9Bx23N6m+KT6llapqQxFJQ2LnNHTFXm9qtpXlPf7e49o
YPn0nKmGoLnNYmbkRpxzrxXKGz4IDNtfuT39WZaDzb8EswOZG5ZfrQbkpwBBG1GU
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48487664133655060643474094172069346045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 20:00:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 20:30:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nrs2.gov.mb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28527408987931693355815851025110488412017385592070551284467915515675090346917251213928008021419889384258903124601545170524874250313390790161624988659749141667755022708088387344238465919639744058899309011023170917581560383184341143027237014551079792433095088545745922906311533008340432541466761623269648555392877161390150267876052335541948874887653805234876833378806064887809108167953031706805381626885202955251797891723188453433491574315438801719913618185737391423608428192105851368367984169273359026146919102620175081032435688393063579728454590857981677698890343028223578688630444594611786829248450047664068601418893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrs2.gov.mb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec14ccb321a4fe264fcf49cc558862f903f650b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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