app0765u.me.mbgov.ca

- Department of Finance (Province of Manitoba) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 05:c2:43:86:90:a6:5f:af:ea:ba:23:ad:73:28:01:9e was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department of Finance (Province of Manitoba)

Organization: Department of Finance (Province of Manitoba)
State / Province: Manitoba
Locality: Winnipeg
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:c2:43:86:90:a6:5f:af:ea:ba:23:ad:73:28:01:9e
Serial Number (int): 7654815152264532468033268023244095902
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 82:da:26:49:90:44:fe:8e:16:74:a3:91:9f:6e:0c:02:e7:dd:7f:22
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fc:2c:6a:a0:1f:f1:13:b5:b9:f1:ab:3c:36:8a:ec:da:ff:0d:11:64
Fingerprint (sha256): 80:57:ed:16:0a:19:0f:4b:aa:4e:48:f3:eb:10:07:c1:35:e7:fe:8b:f7:82:12:cc:51:02:c8:5e:06:58:09:96

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate app0765u.me.mbgov.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app0765u.me.mbgov.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app0765u.me.mbgov.ca

Other certificates including the domain name mbgov.ca

(limited to 100 certificates)
mbpdbs0729u.shared.mbgov.ca
webmail.me.mbgov.ca
m3p.intranet.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
wpg212db20-orap.shared.mbgov.ca
app0671d.me.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
guest.me.mbgov.ca
app0753x.me.mbgov.ca
employeeselfservice.me.mbgov.ca
app0625u.me.mbgov.ca
uat.app22.intranet.mbgov.ca
uatweb11.intranet.mbgov.ca
res331vad01.shared.mbgov.ca
web30.intranet.mbgov.ca
webmail.me.mbgov.ca
gomc-1167800.me.mbgov.ca
SSPR.ME.MBGOV.CA
intranet.mbgov.ca
train.m3p.intranet.mbgov.ca
uatweb30.intranet.mbgov.ca
mb1etachyon.me.mbgov.ca
CAMSDMBAD102.ME.MBGOV.CA
mbnw.intranet.mbgov.ca
employeeselfservice.me.mbgov.ca
employeeselfservice.me.mbgov.ca
intranet.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
clp331xen01.shared.mbgov.ca
employeeselfservice.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
employeeselfservice.me.mbgov.ca
opsfms.intranet.mbgov.ca
intranet.mbgov.ca
webmail.me.mbgov.ca
opsfms.intranet.mbgov.ca
webmail.me.mbgov.ca
app0625u.me.mbgov.ca
app0844p.me.mbgov.ca
web11.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
CAWNDMBAD103.SHARED.MBGOV.CA
CAWNDMBAD108.ME.MBGOV.CA
ns2dclapp.intranet.mbgov.ca
uatreporting1.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
uatweb9.intranet.mbgov.ca
mbpdbs0728p.shared.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
CAMSDMBAD102.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
*.secure-wi-fi.me.mbgov.ca
clp331dc01.shared.mbgov.ca
ns2dclapp.intranet.mbgov.ca
app0625u.me.mbgov.ca
ns2ds4app.intranet.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
web11.intranet.mbgov.ca
app0753x.me.mbgov.ca
app0625u.me.mbgov.ca
saps4.intranet.mbgov.ca
uat2.m3p.intranet.mbgov.ca
app0752d.me.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
LDAP.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
uat.m3p.intranet.mbgov.ca
LDAP.ME.MBGOV.CA
app0640p.shared.mbgov.ca
uatweb30.intranet.mbgov.ca
CAWNDMBAD108.ME.MBGOV.CA
web11.intranet.mbgov.ca
webmail.me.mbgov.ca
wpg212db20-orap.shared.mbgov.ca
mb1etachyon.me.mbgov.ca
*.mbnw.intranet.mbgov.ca
EDGEPOOL01.ME.MBGOV.CA
intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
web30.intranet.mbgov.ca
CAWNDMBAD103.SHARED.MBGOV.CA
LYNCPOOL01.ME.MBGOV.CA
web9.intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA

Certificate

The complete raw certificate details for app0765u.me.mbgov.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsB0BhrMnpeyneCQTCg+
euFHpChIerPG/tmMvUhNayzebXITxsFgsoh5auiEc9mOc1QOZTGcggYoN2Z1doJc
2QGhaYxbMps6f3BDLF6OKvUGoaWBjtg7wOSqt8f37/sF5SgIwECy9LXyFpJKIjJd
BmKzF2cgXOd1ESSvznZ++ZQI8L/GqyYdxn60UoigzBwy1cv4UCXw69dTCgLSxX2Z
t63HFB6TcnEjTmqFJc6LtFVjSrqTKMBF+7EtP1Gx068Kp+GICL5dD41txQygAlCt
qNr6udcI6D3TLALXMbQioiMYou8D3jqXSbDbBwb6D9YjyfoGmxofKnuW4ObRQyRb
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7654815152264532468033268023244095902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 18:29:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-10 18:29:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app0765u.me.mbgov.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19535601183696978344873481979663311674011041654200081097106643022009656707028598312721198477757331679293887755705939903242776421861629369504086724813849085876262951434753535926279387600940235124314832204228385651202092723104563281784005052404703759725892694953560251150256059987542901038328030464826460942064648001333681481560941751181018520848984804646064319942254511138339013304498623515109726370031632445050603735779310180314584304844179984955382099563711749977310732043964301324113983218476704778276934176837600563828940069810060037898574501662447094838498403605369656430067074314365756380869800695164852699945823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82da26499044fe8e1674a3919f6e0c02e7dd7f22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app0765u.me.mbgov.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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