rapid-reimbursement.claims.c1.statefarm

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:14:a9:62:01:e3:50:18:5c:9e:ef:56:8a:37:79:48 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rapid-reimbursement.claims.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:14:a9:62:01:e3:50:18:5c:9e:ef:56:8a:37:79:48
Serial Number (int): 4094965416692677111077150445004093768
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ef:98:44:c0:8d:69:c1:6d:4e:3d:6d:44:b6:2d:16:3c:2b:34:ab:5f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 39:cf:94:b7:30:29:0f:97:2e:c7:76:fd:f7:8b:53:2f:83:ff:4f:3d
Fingerprint (sha256): 2f:63:0c:23:f1:43:50:5a:d3:50:5b:dc:71:ac:2e:d9:b3:13:ef:a8:5b:43:f3:a8:93:9d:49:6a:12:d6:87:d3

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate rapid-reimbursement.claims.c1.statefarm

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rapid-reimbursement.claims.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rapid-reimbursement.claims.c1.statefarm
rapid-reimbursement.claims.statefarm.com

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
api.infosec.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
api.infosec.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
ingest-vaaei8.sfconnect.digxp.test.c1.statefarm
datalake.test.c1.statefarm
driveforsafety.whs.c1.statefarm
driveforsafety.whs.test.c1.statefarm
dev.armapi.test.c1.statefarm
repaireligibility-1706942.claims.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
auth-utl.claimsvc.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
rentaleligibility-1290880.claims.test.c1.statefarm
my-neighborhood.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
facade.ecrmclaims.amccint.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
env1.autoquotebuy.pcmngd01.test.c1.statefarm
api.claims.test.c1.statefarm
repaireligibility-1733275.claims.test.c1.statefarm
media-mfe-shell.claims.sandbox.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
photovideocapture.claims.test.statefarm.com
hub.claims.statefarm.com
driveforsafety.whs.test.c1.statefarm
repaireligibility-1732729.claims.test.c1.statefarm
bank-callback-api.settle.test.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
auth.proofing.cimdev.test.c1.statefarm
homesafety.ting.c1.statefarm
perf.checkout.autoquotebuy.pcmngd01.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
driveforsafety.whs.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
rentaleligibility-1736388.claims.test.c1.statefarm
api.claims.rapid-reimbursement.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
repaireligibility-1733283.claims.test.c1.statefarm

Certificate

The complete raw certificate details for rapid-reimbursement.claims.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRNCh31MRnN1EdICG3b1
hnf8mCQTZBw125obHLGmCWTmsRNarzszz0AFsSxF6JAE2Za0dczEDlWQ1slf15kP
ZBiOM6hDr0zLIFF6s8R5IwsN+KHsDiDrBweLuMbRHWLbaybpNGnj9LT6UQ0xcEpa
1ALrHJKs/JEKp7RPLWrDp1fps1irL3sTqg7fzWg0V08bf+562D1cSRcZ0x6i+AT+
1XeLuyq+Rf0OpCiqW7/i8Q9EKZe+OW8SxmDH3IcmF5JWyuTqezWa7oKp4MFD/ReI
ufZ34gRU/lNnG8StP15QbrZV8JcEnjwV7331o8X09Rja1HbtMxP/jJLcYmdQWR68
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4094965416692677111077150445004093768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rapid-reimbursement.claims.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20333864500289499863273355765121188661979517227099784607260451413528549817447564921143682559676167405294302962499538601128616348345870691235590475900080936684132235774623273925481157930397543058106040359657355540134196288237769784561863417314120000013839413935076420140761988854218833175744385118974163247777525886030276418907021362637103261034503619224596204572810534446960231434318060793485803331489662638405054514731619284691342393543612708842938987453406650287480466268135787483499326549261346287119242375623275649890356529746286522523523028790344221476387958724617671218853559494427494454382344927211821733952593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef9844c08d69c16d4e3d6d44b62d163c2b34ab5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapid-reimbursement.claims.c1.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapid-reimbursement.claims.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a91c4c5d5000004030047304502204ea8691e80922ce9883c673e7616608b3b45711822a91776ce027a0ba5159ef7022100ab91556c068df1b1674f16e654b4e61db5d0dcfd4e67b89fc41016bbcad6ac4d00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a91c4c6200000040300463044022067570e022f8ecfee1a1e3b5a6b5b0ed155c460e65fbd021a1c8717a9a641320d02204610310c004e2f1cfe9b517ce2b0b0d9ad163864c24eaa441a1395bf88deff9f007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a91c4c5db0000040300483046022100858be9ef3d42c9cc285ce824d62194085b2c07a116942619837725a0c34e3b33022100b680ec95cfe665725f28d4f54ea5bb98420bba48e7590e642951fab7a0741546
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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