rewards.myob.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9f:20:ca:31:66:9e:61:b1:00:00:00:00:50:f9:53:a9 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MasterCard International

Organization: MasterCard International
Organization unit: BIP01 DIDC
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:20:ca:31:66:9e:61:b1:00:00:00:00:50:f9:53:a9
Serial Number (int): 211517505789953581728095325718589297577
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f0:7a:c0:94:63:d7:b1:69:a1:10:bc:c1:5e:7e:b9:7c:84:24:c1:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 64:a5:39:e6:a4:8b:da:b4:dd:21:b0:85:04:e3:a8:bf:a2:6b:23:3e
Fingerprint (sha256): 01:ac:f4:d1:a9:29:19:15:79:f9:15:eb:8f:4e:07:be:0b:00:ee:ea:4f:cd:c8:34:fc:bf:98:1c:fc:71:82:65

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rewards.myob.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rewards.myob.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rewards.myob.com

Other certificates including the domain name myob.com

(limited to 100 certificates)
secure07.stage.lithium.com
payments.myob.com
cardportal.myob.com
sit.banking-rules.dev.myob.com
sitcollab.confirmation.myob.com
dl.myob.com
pay-item.payroll.prod.myob.com
xid.myob.com.au
advr.myob.com
peoplehub.myob.com
tax-migration-analytics.svc.platform.myob.com
rewards.myob.com
y-arl-services-2.myob.com
alerting.wp.svc.europa.jupiter.myob.com
metrics.data.svc.europa.jupiter.myob.com
links.app.sre.myob.com
agencyapi.myob.com
*.digital.myob.com
*.login.myob.com
cdn.rogue.dev.myob.com
secure04.lithium.com
mobile-ci.myob.com
relaycloud-stage.api.myob.com
monitoring.fs.svc.europa.jupiter.myob.com
app.myob.com
pay-event-publisher.payroll.dev.myob.com
preview-sme-features-api.svc.platform.myob.com
accountrightlive.myob.com
upgrade-api.svc.platform.myob.com
secure07.stage.lithium.com
production-employee-servicing-time-api.svc.platform.myob.com
my.account.myob.com
docker.myob.com
secure04.lithium.com
advr.dev.myob.com
upgrade-web.svc.platform.myob.com
upload-file.myob.com
dev.module.advr.myob.com
advr.prod.module.myob.com
*.gem.myob.com
*.dev.essentials.myob.com
reminders-api-prod.svc.platform.myob.com
metrics.wp.svc.europa.jupiter.myob.com
advr.dev.myob.com
*.ar-services.myob.com
payagent.payroll.prod.myob.com
web-assets.myob.com
bankfeeds-api.myob.com
ap7-1.cdn.salesforce-communities.com
billing.sab.myob.com
sit.id.myob.com
api.pvt.reminders.myob.com
production-report-data-auditor-api.svc.platform.myob.com
m-arl-cfsts.myob.com
metrics.wp.svc.europa.jupiter.myob.com
prod.help.myob.com
cdn-stp.payroll.dev.myob.com
myob.com
wfm.myob.com
sni.cloudflaressl.com
arl-protected-api.dev.ar-services.myob.com
b-arl-cfsts.myob.com
ledgercache-cache-dev-console.nebula.dev.myob.com
preview-report-gst-workflow.svc.platform.myob.com
financial-institution.myob.com
secure07.stage.lithium.com
*.partner.myob.com
myob.com
production-eedx-project-kiln-backend.svc.platform.myob.com
mysuccess.myob.com
loyalty-service.myob.com
*.external-data-interfaces.prod.myob.com
resources.digital.dev.myob.com
ci.super.myob.com
monitoring.ps.svc.europa.jupiter.myob.com
monitoring.pwf.svc.europa.jupiter.myob.com
onthego.myob.com
secure07.stage.lithium.com
monitoring.wp.svc.europa.jupiter.myob.com
snap-server.svc.platform.myob.com
directory.myob.com
test-integrator.myob.com
perf-task-orchestration-api.svc.platform.myob.com
myob.com
secure04.lithium.com
secure04.lithium.com
ledgercache-cache-sit-notificator.nebula.dev.myob.com
secure07.stage.lithium.com
*.external-data-interfaces.prod.myob.com
pgtraining.myob.com
alerting.lb.svc.europa.jupiter.myob.com
secure04.lithium.com
salesforce.api.svc.invoicefinancetest.myob.com
partner-search-leads-service.svc.platform.myob.com
trialist.dxp-data.myob.com
sni.cloudflaressl.com
pay-item.payroll.prod.myob.com
pubsub.myob.com
gmtetc.myob.com
view.email.myob.com

Certificate

The complete raw certificate details for rewards.myob.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pV96Pfs2jUo0ULmWk+8
bPLHDyFiYN0eRDPTR7uYeGAV+6/3e9YTy7Kv3QwvcV0M8DPpFYjjAKc8oQSQzswd
G5GqnkLMf3OjdrvIxFDIjeboVL+KkaEgEIJiVtc0W8uzY8pApvhMXSzktc9avrd6
9lDOW0nHodxi0cSi04QElydPBnIZZDDSJcBrtRCXCiaXwwlAUF0JQYohBH4EzOr3
7TfyMFoqcMdXWKd7onVnRQROCjAfyL4Jc0ACGt7pSjL10EJj/+NNESPpfI2fiMXM
2e9Gp917V5kgqLy9GfQxvSPeRT+Vq0JAPHNIN3UKJ6faZZzEIq5sKiYnLz+vLhrp
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 211517505789953581728095325718589297577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 13:49:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 14:19:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIP01 DIDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rewards.myob.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30623386973627225531643462962674449064612056313357356830517990349868586908173987115349782788793013625189776969234625781815226897027530652275514748239562885773419259072504463075212077139447686853206662470383381649122932097427102820487412298981075634646948845446133346393825528039147251624830987577501353540849877479793417931901158067201885860395955395023815813876175883816339659775117690538518117584167283474569850158337170983827980866566891841665916439531951489130451485415038416540198253582194178868571077452971105884627042851411300078185123065993826691193756009281303744311598416827620625540717556823475643412572593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.myob.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f07ac09463d7b169a110bcc15e7eb97c8424c186
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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