intra.dev.ontario.ca

- Government of Ontario -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 49:23:7d:14:9a:75:4b:0b:c9:87:d4:5f:8b:cc:54:5f was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Government of Ontario

Organization: Government of Ontario
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 49:23:7d:14:9a:75:4b:0b:c9:87:d4:5f:8b:cc:54:5f
Serial Number (int): 97217911015913774661370489310842475615
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 55:43:8b:3f:ab:fd:91:cc:4c:28:2c:8d:bf:9f:fd:00:ce:0e:f1:b0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0f:80:2a:41:32:e5:b1:fa:3c:f8:c9:ba:24:c4:c8:6e:2f:a7:0f:27
Fingerprint (sha256): 93:b9:bc:e9:4b:d2:eb:e3:33:61:2b:6c:90:a3:8f:3a:ad:e7:a7:7d:92:47:88:9e:e0:4d:26:39:bf:99:72:3b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate intra.dev.ontario.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intra.dev.ontario.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intra.dev.ontario.ca
www.intra.dev.ontario.ca

Other certificates including the domain name ontario.ca

(limited to 100 certificates)
covid-19.ontario.ca
meet.video.ontario.ca
ontario.ca
stage.data.ontario.ca
subscription.news.ontario.ca
analytics.health811.ontario.ca
metrics.health811.ontario.ca
ontario.ca
www.dev2.signin.ontario.ca
email.ontario.ca
data.ontario.ca
relay.health811.ontario.ca
ontario.ca
www.lio.ontario.ca
insite.gov.on.ca
dev.insite.gov.on.ca
ero.ontario.ca
webmail.ontario.ca
ontario.ca
www.fin.gov.on.ca
lb1-messaging.health811.ontario.ca
wwwdev.sus.ebc.gov.on.ca
subscription.news.ontario.ca
smtpgw1.gov.on.ca
intra.dev.ontario.ca
www.fin.gov.on.ca
covid-19.ontario.ca
email.ontario.ca
ontario.ca
remote.photogallery.ontario.ca
ontario.ca
intra.newsroom.ontario.ca
dev.insite.gov.on.ca
www.sus.gov.on.ca
test-reminders.ontario.ca
ontario.ca
intra.ontario.ca
fhirapi.health811.ontario.ca
pim3.ctarenquiry.ontario.ca
intra.dev.ontario.ca
ontario.ca
news.ontario.ca
attachmail.ontario.ca
relay.test.health811.ontario.ca
wwwdev.sus.ebc.gov.on.ca
subscription.news.ontario.ca
pcsg.ctarenquiry.ontario.ca
intra.stage.ontario.ca
remote.newsroom.ontario.ca
news.ontario.ca
ptp3.ctarenquiry.ontario.ca
video.ontario.ca
budget.ontario.ca
stage.data.ontario.ca
etp3.ctarenquiry.ontario.ca
www.lio.ontario.ca
covid-19.ontario.ca
intra.dev.ontario.ca
data.ontario.ca
ontario.ca
portal.health811.ontario.ca
file-object-service.sdprt.health811.ontario.ca
intra.ontario.ca
ontario.ca
ontario.ca
intra.stage.ontario.ca
intra.stage.ontario.ca
www.survey.ontario.ca
ontario.ca
sftp.health811.ontario.ca
metrics.stage.health811.ontario.ca
ontario.ca
kafka-1.sdprt.health811.ontario.ca
attachmail.ontario.ca
intra.newsroom.ontario.ca
test.data.ontario.ca
mail.ontario.ca
dev.insite.gov.on.ca
attachmail.ontario.ca
ero.ontario.ca
engage.ontario.ca
query.sdprt.health811.ontario.ca
www.ontario.ca
email.ontario.ca
ontario.ca
data.ontario.ca
ux.demo.ontariowebservices.ca
test.data.ontario.ca
intra.ontario.ca
ontario.ca
dev.insite.gov.on.ca
attachmail.ontario.ca
covid-19.ontario.ca
data.ontario.ca
developer.ontario.ca
stage.sus.gov.on.ca
intra.ontario.ca
covid-19.ontario.ca
DirPool-Ext.ontario.ca
www.dev1.signin.ontario.ca

Certificate

The complete raw certificate details for intra.dev.ontario.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqKgaHfxcpbaSxT1In5
L84OGsNhwJlAzctsdsVAsScy82ySD1pRaea54kaJ2vF55bSYKrSUoxkIo3TWyO3t
QFzEpzq/b9HXwIDbU2gDRE9eXkXFiU4AatB6L4Isp4zrJxNbSfHskBWyZG4TDBd4
PZCjC+HtCxSQf2aCRK7zQugaUsarTNYmGXhPItGaKvU9+6Z+LyE3n1xp5r8TZ1Vq
Fz6edjDI7Hg5lwEr0+3pBjVE3O59NXaDpnVSWi0vrwetXejcR2ylfFicYqvJ1vYM
Tu7tB/CClU40MZ6Gz/XleOz6XsysVJqMC4vD/eHmHKP0ADH+KGMuRQvVhQjrgcir
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97217911015913774661370489310842475615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 16:08:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 16:08:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intra.dev.ontario.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24250842428361478845723979760888349002108272824872255912455778891407730772585919891523430060325441215609919886785119449149971413815924068365275492111636964615644706935460339143624003127937048265061650972532702109392131541759888278320660120691023595872306748839305703002716568475290061717733274033809922454943619285116363763208499801474404080457339160912604450351570451790908499867705717908162409998221352852385986202598059454766268412420800930201203543982064511048333554559995435644126830194002025871050244655551491704146384962010525899082493462989007250374675136518301560325675979149409455287804910932878944994110437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55438b3fabfd91cc4c282c8dbf9ffd00ce0ef1b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intra.dev.ontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intra.dev.ontario.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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