*.rfk.plumbenefits.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:f2:89:d6:ce:64:4b:d0:50:a9:c3:1d:b3:81:92:1c was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.rfk.plumbenefits.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:f2:89:d6:ce:64:4b:d0:50:a9:c3:1d:b3:81:92:1c
Serial Number (int): 19868523489571891463553925703612338716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 52:a5:a5:a3:60:a6:ae:4d:42:03:2e:37:29:58:6c:25:9f:69:b7:7f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 33:08:41:4e:8a:28:82:5d:60:af:bb:d7:92:a0:89:1b:f9:86:39:0b
Fingerprint (sha256): 24:04:de:7d:a1:9c:46:aa:f1:13:04:d3:01:59:81:8b:33:d0:3f:90:e9:25:6b:bc:7b:fb:41:53:b4:9a:d8:03

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.rfk.plumbenefits.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rfk.plumbenefits.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rfk.plumbenefits.com
*.rfk.ticketsatwork.com
*.rfk.workingadvantage.com

Other certificates including the domain name plumbenefits.com

(limited to 100 certificates)
m.plumbenefits.com
starget.ticketsatwork.com
*.rfk.plumbenefits.com
starget.ticketsatwork.com
cruises.plumbenefits.com
webmail.shubertorg.com
www.plumbenefits.com
plumbenefits.com
www.plumbenefits.com
*.rfk.plumbenefits.com
www.plumbenefits.com
*.rfk.plumbenefits.com
www.plumbenefits.com
www.plumbenefits.com
preferences.plumbenefits.com
e.email.ticketsatwork.com
*.rfksrv.com
*.rfksrv.com
sni.cloudflaressl.com
view.email.ticketsatwork.com
m.plumbenefits.com
sni.cloudflaressl.com
starget.ticketsatwork.com
smetrics.plumbenefits.com
view.email.ticketsatwork.com
cruises.plumbenefits.com
www.plumbenefits.com
smetrics.plumbenefits.com
www.plumbenefits.com
www.plumbenefits.com
*.rfksrv.com
starget.ticketsatwork.com
e.email.ticketsatwork.com
view.email.ticketsatwork.com
preferences.plumbenefits.com
smetrics.plumbenefits.com
*.rfksrv.com
preferences.plumbenefits.com
*.rfksrv.com
*.rfksrv.com
m.plumbenefits.com
*.rfk.plumbenefits.com
smetrics.plumbenefits.com
smetrics.plumbenefits.com
view.email.ticketsatwork.com
m.plumbenefits.com
e.email.ticketsatwork.com
*.rfksrv.com
e.email.ticketsatwork.com
smetrics.plumbenefits.com
*.rfksrv.com
*.rfksrv.com
www.plumbenefits.com

Certificate

The complete raw certificate details for *.rfk.plumbenefits.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2u9zrrxj2XfF/uc247Y
r5DC+97zAUwIkqp/bqmbdJphayIe5lEGZTamY8Sqqm7/2XDrB7n8HpMJT81tyg34
fj6fQQw1RAp/psm6/Ct3lXC6PxDp7KnJh7UhEq3YMeUGo3XVQQh8ElIHBInwv1LP
vrawXqS49ho4TgNG6WPtG3zrgde9S+dF7uiwFsBu4oj/rZaxwSBLrfoSYz1AdD2X
uGcW2SqqiOdBWFKR/MXy4koxoMpMcgufTkM66HcNQ/iAolbv3JcjxH5UOYJPAUVG
Eg1/2CuTxk+y6YHMgnwqBTZeowS6shYRH28MchxDmboA2I6FrNMQ9AzvYKx0fJgA
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19868523489571891463553925703612338716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rfk.plumbenefits.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24164645530617932401883241899627065330216966062275787121259587118966736393168089449132212006519979130156218326013417409914221660941860827431376443540423353216200545722460959371704642602116805274111224747584329722909483633745723650710634787321110148315964876852545275252508679823992773157425775086169448489858925104795690230042605011398348712629458899307288056020638790220360314232415081779567968261708333331767933965709241214350047197542791107451129785318810138791550080635647582302757473980189336728746368683677553704244365204170635277678407585912082984642556416161983392158805452565606217217795150912227768171757719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52a5a5a360a6ae4d42032e3729586c259f69b77f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rfk.plumbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rfk.ticketsatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rfk.workingadvantage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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