act.bencrump.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:fb:88:76:f4:bd:67:9e:60:53:88:00:cc:69:95:03 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=act.bencrump.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:fb:88:76:f4:bd:67:9e:60:53:88:00:cc:69:95:03
Serial Number (int): 19915226284853655967373648177071232259
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:a3:bd:25:c0:b7:a7:b1:0f:3f:e2:77:4e:37:8a:5c:ba:96:bd:dc
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3d:16:6a:6d:11:cf:e2:a2:06:26:7b:93:ac:fe:c0:e4:4c:f7:b2:6c
Fingerprint (sha256): 15:a4:1c:06:dd:6f:d7:21:fa:fb:45:61:de:1c:d8:c6:24:53:8a:f4:7e:fb:34:94:89:ad:37:7d:b8:aa:26:6d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate act.bencrump.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.bencrump.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.bencrump.com
ben-crump-law-oa.edge.targetedaction.net

Other certificates including the domain name bencrump.com

(limited to 100 certificates)
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
act.bencrump.com
5701569219657728-fe1.pantheonsite.io
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
5701569219657728-fe1.pantheonsite.io
bencrump.com
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
bencrump.com
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
www.bencrump.com
www.bencrump.com
cm.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
5701569219657728-fe1.pantheonsite.io
bencrump.com
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
www.bencrump.com
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
action.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
www.bencrump.com
act.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
bencrump.com
www.bencrump.com
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io
5701569219657728-fe1.pantheonsite.io

Certificate

The complete raw certificate details for act.bencrump.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qBUccOIopaWZ32I1JLM
TTarCfV0PW8hCfYoa8QKNgafL+ED+F/vtjlrGWKockacR+ZSDX2Z2Jdt4ak3CNs+
C8Dd+6th8s+ElVx4TyxkDZao3Ddc051QkHvhnuSHMWz6+d3JUERojAn/tBRkLUcb
6Wr1LtLNcj8CfDSt8wx6Ss8aJOaSJhRuvdU5Tvph+/vzDr1eEq9A1XXSIUPYHdOp
TBhY9djKVj7zNFYNsWe8HeUB1Z0D7sOvTDl7K07jdnmp9t/lNguymTGyYDRMeqLr
53Jy61ik6fuhzWEJnDzyts/LAftRqavgeFvrNtIwyO/8+3c0AZ//nZLX4kiBVdpQ
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19915226284853655967373648177071232259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.bencrump.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27094058863811516514980154616486109163388090769479131460627868389733396455106774382252511409849048274402724827849252149614920554313009801745245350427284910000503947900075871847747877284353512631497279111897155320126042734563192029469787213572228897324848317506028357262912589887449627357879893207802534690633349817631925971793674935525013246746760211831089764394354438467686639591600568958058196588950975215026931263781333591305554481906890172694095027911539704339897260272485176277070375414695525426681755241272178072183971399228831773585081155963767464880184253644787318525943308042405441562962435034165240634429487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86a3bd25c0b7a7b10f3fe2774e378a5cba96bddc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bencrump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ben-crump-law-oa.edge.targetedaction.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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