www.benefitsbrokerage.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:05:b4:ad:72:23:98:93:17:b7:91:e7:64:90:29:d4:13 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benefitsbrokerage.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:05:b4:ad:72:23:98:93:17:b7:91:e7:64:90:29:d4:13
Serial Number (int): 332803739119991166500576842626021209003027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:b5:2f:40:46:c5:73:2b:38:ac:f5:9f:66:d2:6c:4b:a1:0e:77:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:19:67:f6:04:ae:65:62:e2:2f:a5:da:a0:03:ea:0f:08:bb:27:8a
Fingerprint (sha256): f0:a1:bb:55:ec:d8:73:21:f2:ba:12:d7:a3:01:58:4a:cc:fd:a3:b1:e6:aa:38:a8:da:c4:78:80:b6:00:30:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.benefitsbrokerage.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benefitsbrokerage.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.benefitsbrokerage.net

Other certificates including the domain name benefitsbrokerage.net

(limited to 100 certificates)
www.benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
www.benefitsbrokerage.net
mail.benefitsbrokerage.net
www.benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
mail.benefitsbrokerage.net
mail.benefitsbrokerage.net
www.benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
mail.benefitsbrokerage.net
mail.benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
www.cmscert2.ipipeline.com
benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
benefitsbrokerage.net
benefitsbrokerage.net
www.benefitsbrokerage.net
www.benefitsbrokerage.net
www.benefitsbrokerage.net
mail.benefitsbrokerage.net
www.cmscert2.ipipeline.com
www.benefitsbrokerage.net
www.benefitsbrokerage.net
www.cmscert2.ipipeline.com
mail.benefitsbrokerage.net
www.benefitsbrokerage.net

Certificate

The complete raw certificate details for www.benefitsbrokerage.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZG5lVavuEAXiTI01hD4
TzYIjdZtCkaqRcKKgAE5fGetgCxrIWAnk2UCRJIj3tGrJWkMiOKZRawUceOJZApF
Hip54ZrgFASK15Fmlvj0fsI5KbS5DHCuTUWktvhMHszQl9R1Lg5lXDBo3lc7e9Ni
3835oqPBj9e2Ukk9/T8OTSy8lLU13+GPePUYgV1X1cD00Js7cKNPz0/NkFS0z5vi
mqR63m74EUJQsaVxDZGUW4m2Trs0kYlFHHYrejFD8xpCOWhjZVvJ3j/983H+R71w
sk0hhp4i7cxCrRG31X5dG7+H4NpPXpPsLck7iH6Lnlrq3k8vGS5Fn64mfzZYC4mv
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332803739119991166500576842626021209003027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 00:22:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 00:22:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benefitsbrokerage.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30495291140502629083548425669211784723823080655688359828821858124944483561983660685120081351479828235215594389798573559454992394859399068979619957781791090369120227806218167327519591622622561619995755364181349009117652471920676789698628636206656054578784373351879034477916452778523529982128882971592505298114773222531409107481925759821194344124601792131827125710825792550972708839416737941897582083804010162142508487533656599782409425323081307955177152368949528672755641961082208591068177551289023107345120905249045636624500521393681040884664772523486868168950462279482111790645127454336502291791618979049228875706139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52b52f4046c5732b38acf59f66d26c4ba10e77d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitsbrokerage.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017012f13d88000004030047304502203a8cfd09e48e40a4ad55aa7d6ceb798f66c8533181c26e0d89bf204fe3fd9584022100c040d3d73411bbf221ed98b57c04d82a7e686b82e23726a1fc448265d42836f3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017012f13d7c000004030046304402205c2c767500e2aac091354af06adc747977044d20ee3e0d55e11f13eaecb143b0022016c93447b9e644c1fcca08acfdc72331e96a7c70748e2c75a93a94fbcbe3bf80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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