immunizationcard.manitoba.ca

- Department of Finance (Province of Manitoba) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 10:d2:e2:3b:5c:9d:28:9e:e0:bb:0f:9a:d8:e2:11:29 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Department of Finance (Province of Manitoba)

Organization: Department of Finance (Province of Manitoba)
State / Province: Manitoba
Locality: Winnipeg
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:d2:e2:3b:5c:9d:28:9e:e0:bb:0f:9a:d8:e2:11:29
Serial Number (int): 22362618800545595470245722869410697513
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: c1:ea:52:bd:e9:92:dd:60:d6:97:cc:a6:76:f8:26:e2:9b:f4:f3:79
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 76:6e:22:73:17:79:7e:be:37:7a:01:36:73:5f:15:ed:25:5e:87:7d
Fingerprint (sha256): 7c:05:3e:90:ec:fb:e4:f7:2a:08:68:ee:07:32:01:b6:c0:5b:7c:35:c1:c1:0e:ba:2a:0a:15:e5:44:1c:3c:9e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate immunizationcard.manitoba.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immunizationcard.manitoba.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immunizationcard.manitoba.ca

Other certificates including the domain name manitoba.ca

(limited to 100 certificates)
manitoba.ca
uatimmunizationcard.manitoba.ca
uatimmunizationconsent.manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
manitoba.ca
immunizationconsent.manitoba.ca
manitoba.ca
60b725f10c9c85.manitoba.ca
manitoba.ca
www.manitoba.ca
immunizationcard.manitoba.ca
*.gov.mb.ca
manitoba.ca
stimmunizationconsent.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
manitoba.ca
manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
SSO.MANITOBA.CA
SSODR.MANITOBA.CA
manitoba.ca
manitoba.ca
*.gov.mb.ca
*.gov.mb.ca
devimmunizationconsent.manitoba.ca
www.manitoba.ca
*.manitoba.ca

Certificate

The complete raw certificate details for immunizationcard.manitoba.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22362618800545595470245722869410697513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 18:27:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 18:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immunizationcard.manitoba.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828115572669987364256419782934822914108473178268938988279235804935801999238293622192440220710713899151136104207509179439140274807107848364717400908066338894387785368022316796776298467180168535232736315978687305841328639967826637073774288348535292065381568909488840435001281311570356173418989251560700891790930756420841946575322608764404257773553100682674346454268437959377951015794092772972690597320004614150376743818563365965473305358907667504296380333125669015933573478864634278156619702801768096923043015450106194402897018025896106401750304771841728774987575412042464818880552081100409535393345466435812759562350092612842387563495636216630275376114826946824984324505679869155943502147494535891673626434801539360343688245570661933877301091402652765750749950238242940568392413106793547851794382671459130708161438176877920291345122656694022728183468365875641016838077199669436393884389165298487076060876811289963015012512550537660128354642443862721163319827253220802270525366823450640142459089132263676723767607896646131369749796855730313754117695690497377671616706318560171818547158367448706351939237526791942714533247888679412956000401034680704897206013983707447368540322604952658706597832467536100002996941098307930375990597552109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1ea52bde992dd60d697cca676f826e29bf4f379
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunizationcard.manitoba.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018801c5002100000403004730450221008452a757575012b36823f5ce37a3362249dfa3f8a3922f9f58412a14f39f161402202162fd847abf8612adf76f7a5e1e5f4e1592294011061714f4adfd22837065ce0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018801c5004d000004030047304502210088db5b180da4c6fbae00a1fde728fe63c26006ff15fc726bbcca46698554252a022052f7e17a670e5ec1a85be36cb0992079891827a931dbb25ce16d3a26e868b57c00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018801c500740000040300473045022100e139bb938eeed87db4127f1076dbc42de6756b0ca7e8f944b4746813f4661de602202d13dfd6abc6316f8a11377946161fdf9660f56370346640d1c889df0a8b211f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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