cruises.plumbenefits.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:a8:89:ed:0e:dd:ce:8d:4d:b9:59:d1:16:89:5a:8f:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cruises.plumbenefits.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:a8:89:ed:0e:dd:ce:8d:4d:b9:59:d1:16:89:5a:8f:2d
Serial Number (int): 316686627692543172392793711565635252293421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:48:c9:38:a9:21:a5:72:e1:27:bc:b3:ba:5c:ce:72:d0:8d:df:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:fc:54:e8:08:9c:a6:5d:e1:49:89:33:9b:3f:cb:ca:b0:30:89:1a
Fingerprint (sha256): 13:cc:27:b2:63:1b:32:f6:55:19:8d:08:6f:f4:9e:c0:97:58:62:b2:44:fa:cb:d9:42:61:ea:2f:33:7a:56:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cruises.plumbenefits.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cruises.plumbenefits.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cruises.plumbenefits.com

Other certificates including the domain name plumbenefits.com

(limited to 100 certificates)
m.plumbenefits.com
starget.ticketsatwork.com
*.rfk.plumbenefits.com
starget.ticketsatwork.com
cruises.plumbenefits.com
webmail.shubertorg.com
www.plumbenefits.com
plumbenefits.com
www.plumbenefits.com
*.rfk.plumbenefits.com
www.plumbenefits.com
*.rfk.plumbenefits.com
www.plumbenefits.com
www.plumbenefits.com
preferences.plumbenefits.com
e.email.ticketsatwork.com
*.rfksrv.com
flights.plumbenefits.com
*.rfksrv.com
sni.cloudflaressl.com
view.email.ticketsatwork.com
m.plumbenefits.com
sni.cloudflaressl.com
starget.ticketsatwork.com
smetrics.plumbenefits.com
view.email.ticketsatwork.com
cruises.plumbenefits.com
www.plumbenefits.com
smetrics.plumbenefits.com
www.plumbenefits.com
www.plumbenefits.com
*.rfksrv.com
starget.ticketsatwork.com
e.email.ticketsatwork.com
view.email.ticketsatwork.com
preferences.plumbenefits.com
smetrics.plumbenefits.com
*.rfksrv.com
preferences.plumbenefits.com
*.rfksrv.com
*.rfksrv.com
m.plumbenefits.com
*.rfk.plumbenefits.com
smetrics.plumbenefits.com
smetrics.plumbenefits.com
view.email.ticketsatwork.com
m.plumbenefits.com
e.email.ticketsatwork.com
*.rfksrv.com
e.email.ticketsatwork.com
smetrics.plumbenefits.com
*.rfksrv.com
*.rfksrv.com
www.plumbenefits.com

Certificate

The complete raw certificate details for cruises.plumbenefits.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv37VGjxg4dlxz251sQ8n
DTTwmyDYn8DqctFKSPvOzfiv0uzgLVosXzW6Q3jcFOQ0WWZPsSnhD+tLR356ayMt
aMpxH9sxtrvSHM7yYVwo/5hT4OVJhznEx6yyuneCdI/5W/rk56clg7SwqTX6mkvm
V4NnHeGHf8s1DX3PfOommZq8nS1xh+Xo0fcij1mb08UfE5MLpim7CSj4ch0+FAFN
Afn+Qxlk7LU1qQopcm52aD4ow1dQeOsaLsaqxC+6OfIibtKsO/4yiJPAg6ZrNfmL
TAPGRYfyUPZ5guluKgMgkoxCgHD9GaIQISuWCq+jb84SF4UcBJd6jUS354FipU9O
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316686627692543172392793711565635252293421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 18:28:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 18:28:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cruises.plumbenefits.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24174059651552542390381393113110185089090519659991514961888757224155019746213180047565861759428022394070604921165152738533376457638873304151337077502504223721837546836831861103799724340496045121765660210437550165820198184071276432084409207923829472329189417273376099603781989573233072336092282059395830875663651042177554937233873852672176905325687612811358522824480138151757757293124694321251793268537038051030789793660217262186492928048673341592375774591353934799432963192923753502418605530694629268280068426083824522147720090037055099549105710083850195138842308510715813075273984915759008648443769495088817494773483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0948c938a921a572e127bcb3ba5cce72d08ddf7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruises.plumbenefits.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ffd244850000040300463044022071f33864640dce9abadf9854bd437a2fdb3065f70f466c1321aa34cba6aa7fcf02205487507b242cd1fde04db4dcf59eb0dee30eaa952ab0d03e1ed24dd64d3563e5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189ffd244a0000004030047304502200e2619236015c2621fb5bece38f0c12f4e136762846907d6011c1df2be125135022100e31d627c365889c00a633934c0e082cfe112bb0dced0dc470d84148b205e26bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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