mgmttun.mpac.ca

- Municipal Property Assessment Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 64:e3:09:57:c6:df:cd:47:da:d9:62:7c:d0:d0:10:e6 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Municipal Property Assessment Corporation

Organization: Municipal Property Assessment Corporation
State / Province: Ontario
Locality: Pickering
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 64:e3:09:57:c6:df:cd:47:da:d9:62:7c:d0:d0:10:e6
Serial Number (int): 134101640461464156581106262140899037414
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2c:75:2e:8b:49:33:58:e4:93:fa:71:26:78:91:bd:ab:9b:85:ef:4c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4e:a9:dc:06:b3:58:32:50:f6:0d:e7:95:a5:65:e5:0a:7e:fd:7c:a3
Fingerprint (sha256): a9:a5:ee:e8:63:51:4a:8c:c6:c5:0c:6a:bb:83:29:e5:34:4a:31:e0:8f:fc:de:03:ac:fa:dc:5f:af:0b:52:af

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mgmttun.mpac.ca

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mgmttun.mpac.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mgmttun.mpac.ca
mgmttun1.mpac.ca
mgmttun2.mpac.ca
mgmttun3.mpac.ca
anyconnect.mpaclab.net

Other certificates including the domain name mpac.ca

(limited to 100 certificates)
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
b2buat.mpac.ca
*.aws.mpac.ca
soporte.cjgconsultores.com
support.akylade.com
acs-online.mpac.ca
it-helpdesk.hccom.org
guestportal.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
*.aws.mpac.ca
it.oodc.com.ph
services.mpac.ca
*.aws.mpac.ca
*.aws.mpac.ca
desk.mpac.ca
*.aws.mpac.ca
adfs.mpac.ca
*.aws.mpac.ca
b2b.data.mpac.ca
it.oodc.com.ph
services.mpac.ca
servicedesk.aws.mpac.ca
mpac.prd.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
guestportal.mpac.ca
support.spidercost.com
help.tradetechnica.com
apps.mpac.ca
*.aws.mpac.ca
quiz.apexstrategygroup.org
*.aws.mpac.ca
b2b.data.mpac.ca
ra.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
apps2.mpac.ca
support.cosmicktechnologies.com
instream.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
blackduck.aws.mpac.ca
helpdesk.al-mozon.com
api-acs-online.mpac.ca
support.45z.net
casper.mpac.ca
b2b.web.mpac.ca
helpdesk.ie-launch.com
help.tradetechnica.com
mgmttun.mpac.ca
support.thebestclaims.com
sightline.mpac.ca
b2b.web.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
support.cosmicktechnologies.com
survey.makusafe.com
sclearpasslab.prd.mpac.ca
www.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
*.k8s.mpac.ca
servicesuat.mpac.ca
support.foodaccessportal.org
apps2.mpac.ca
ClarityConnect.mpac.ca
mpac.ca
*.aws.mpac.ca
www.axi.sierraleone.mpac.ca
aws.mpac.ca
test1.mpac.ca
aaa.mpac.ca
sap-ec-npr-02.prd.mpac.ca
support.45z.net
annualreport.mpac.ca
apps2.mpac.ca
support.cosmicktechnologies.com
support.cosmicktechnologies.com
guestportal.mpaclab.net
anyconnect.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
sap-ec-prd-01.prd.mpac.ca
guestportal.mpac.ca
it.tnsos.help
it-helpdesk.hccom.org
webtrends.mpac.ca
api-acs-online1.mpac.ca
mpac.ca
servicedesk.mpac.ca
lync01.um.mpac.ca
portal.mpac.ca

Certificate

The complete raw certificate details for mgmttun.mpac.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JBlzxJMeOGl0zcXTJym
SQX/4xMswT6gARtlCiCj49JMqh9tXMbfhRwMep9NCHlVSW6KdA/ym+3GoZ20KfGY
At2SdFGTQ4+XkyU7uoV8s6lIrJbweLFlDnOekcbyWUQBvjLkDSyzjb49vjvomfGJ
C9PhdzA5PZgUZiAghk1acEkU1vmkJZhnj3Jn54KgBFvS6oaKCPX6+lk64tiYDl9Y
/HedlmdjXDz2Ssh99peqG/boej+Snsblci8/2Z9y5dkWYIsdBZcY7kEjT1Jc8bA8
QozCm4vWWtI5IGNQZEfYZ9XR9h9gSwnqldma24ItjVjeWsCyhN7PfGCL5JJqSesZ
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134101640461464156581106262140899037414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 13:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 13:05:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pickering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Municipal Property Assessment Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mgmttun.mpac.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29863445127230047191804542321966556440348625322463476330593958792608098676607651824839234798767186280337325709434345295710397419514504948829540320104076294363755175176271623425620315476682338511840225803876209587690694217120255496508489056968700361908318186879930651994823414091234216594179003205593577183241630201812091845867809813662016695451767667851582668967500213029867918241006659999622317031334396371137342124268882576899542159137307737404061773484234380737782743301287097151911682275697234687548016813743219239093332490511308151747590097733926784916471212581413034624777743966260204286786017579391358394374619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c752e8b493358e493fa71267891bdab9b85ef4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmttun.mpac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmttun1.mpac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmttun2.mpac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmttun3.mpac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyconnect.mpaclab.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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