Benefits OnLine | Login

HTTP/1.1 200 OK
Date: Wed, 02 Oct 2024 12:30:14 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html
Expires: -1
X-Content-Type-Options: nosniff
traceresponse: 00-d74e47c2a20bfa04585110ff0a8ac1a8-84fe16a567299336-01
x-dt-tracestate: fe4e8a5e-689769c7@dt
Content-Length: 76207
Access-Control-Allow-Origin: https://www.benefits.ml.com
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 3600
Strict-Transport-Security: max-age=31536000;includeSubDomains
Content-Security-Policy: default-src 'self' *.ml.com *.bac-assets.com *.bankofamerica.com cdn.cookielaw.org privacyportal-bofa.my.onetrust.com geolocation.onetrust.com testdata.coremetrics.com d.agkn.com players.brightcove.net resources.digital-cloud.medallia.com tags.tiqcdn.com gwm-ml.wsodqa.com www.gwm.ml.wallst.com www.gwm1.ml.wallst.com www.gwm2.ml.wallst.com www.gwm-set1.ml.wallst.com www.gwm-set2.ml.wallst.com data: blob: wss: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' *.ml.com *.bac-assets.com *.bankofamerica.com cdn.cookielaw.org privacyportal-bofa.my.onetrust.com geolocation.onetrust.com testdata.coremetrics.com d.agkn.com players.brightcove.net resources.digital-cloud.medallia.com tags.tiqcdn.com gwm-ml.wsodqa.com www.gwm.ml.wallst.com www.gwm1.ml.wallst.com www.gwm2.ml.wallst.com www.gwm-set1.ml.wallst.com www.gwm-set2.ml.wallst.com blob: wss: 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.ml.com *.bac-assets.com *.bankofamerica.com cdn.cookielaw.org privacyportal-bofa.my.onetrust.com geolocation.onetrust.com testdata.coremetrics.com d.agkn.com players.brightcove.net resources.digital-cloud.medallia.com tags.tiqcdn.com gwm-ml.wsodqa.com www.gwm.ml.wallst.com www.gwm1.ml.wallst.com www.gwm2.ml.wallst.com www.gwm-set1.ml.wallst.com www.gwm-set2.ml.wallst.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' *.ml.com *.bac-assets.com *.bankofamerica.com; frame-src 'self' *.ml.com *.bac-assets.com *.bankofamerica.com; worker-src 'self' blob:;
Origin-Agent-Cluster: ?0
Set-Cookie: Bear=7OtAbKHrBR/Au89d4tE4EFzu2tZCBaZfB1CbO+/pST8=; domain=.benefits.ml.com; path=/; secure; HttpOnly
Set-Cookie: gwmBOLppzpidExt=gwmbolppzexttx2;path=/;domain=.benefits.ml.com;secure
Set-Cookie: TS01bbac7a=0141952b4c70f45e0a4befb2e63f4876958d4f0d4343b8dc5e94aafb27c71d4d46ac1debbc361a4513936710bac8029b0e14b31e27; Path=/; Domain=.benefits.ml.com; Secure; HTTPOnly

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2c:9c:69:62:c3:9e:40:b9:ff:8a:cc:27:20:6b:86
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2014 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M
        Validity
            Not Before: Mar 21 18:12:46 2024 GMT
            Not After : Apr 21 18:12:45 2025 GMT
        Subject: C=US, ST=Illinois, L=Chicago/jurisdictionC=US/jurisdictionST=Delaware, O=Bank of America Corporation/businessCategory=Private Organization/serialNumber=2927442, CN=www.benefits.ml.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:74:f3:d3:6d:54:ca:65:43:11:ed:19:f3:
                    4f:15:c9:92:e0:fb:2c:58:21:67:31:b3:02:29:7b:
                    ce:65:1c:07:14:a0:3d:b8:82:9d:0b:fd:bf:d2:c8:
                    a2:c7:61:bb:85:3c:4c:17:26:22:c6:47:91:d0:c1:
                    a6:55:c0:e1:11:f2:d5:ac:55:d0:f3:f3:35:0a:7c:
                    fa:ca:7a:e1:4d:eb:01:66:6a:80:5b:ab:4e:0a:9f:
                    c4:76:0b:df:83:47:4d:0f:46:54:e1:9a:4e:60:ca:
                    63:95:91:d6:a1:92:6d:92:24:78:98:79:e3:de:75:
                    23:e9:c9:6d:0e:3a:ff:09:9b:42:c4:26:e2:56:bc:
                    85:10:82:b9:7d:b5:a5:ce:9e:7d:ba:7e:5a:0a:cb:
                    15:86:7e:60:a2:a9:33:0c:3a:bf:93:9a:6c:10:f1:
                    91:fd:96:6a:af:dc:9a:66:e7:d3:a1:6d:ee:8a:68:
                    53:9f:4b:fe:a6:2c:e5:56:1c:a1:d5:f2:8d:ce:4f:
                    00:6c:ba:f5:47:49:a8:32:f5:56:7c:ab:ae:4a:af:
                    04:ae:0c:6d:96:d0:48:45:46:e3:62:96:92:7f:dd:
                    13:32:44:14:99:98:21:fe:c9:f1:52:89:ac:9e:4b:
                    4b:8f:90:2d:24:78:9f:d3:13:97:b0:81:67:5b:fb:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D3:44:2C:70:6E:06:16:68:22:7F:9A:E6:0B:37:23:FE:94:19:30:3D
            X509v3 Authority Key Identifier: 
                C3:F7:D0:B5:2A:30:AD:AF:0D:91:21:70:39:54:DD:BC:89:70:C7:3A
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1m-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1m.crl
            X509v3 Subject Alternative Name: 
                DNS:www.benefits.ml.com, DNS:mybenefits.ml.com, DNS:www.mybenefits.ml.com, DNS:benefits.ml.com, DNS:www.benefitsonline.ml.com, DNS:www.mybenefits.benefits.ml.com, DNS:mybenefits.benefits.ml.com, DNS:www.bol.ml.com, DNS:benefitsonline.ml.com, DNS:bol.ml.com, DNS:benefitsonline.com, DNS:www.benefitsonline.com, DNS:www-va1.benefits.ml.com, DNS:www-va2.benefits.ml.com, DNS:www-tx1.benefits.ml.com, DNS:www-tx2.benefits.ml.com, DNS:origin-boluicdn.benefits.ml.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.16.840.1.114028.10.1.2
                  CPS: https://www.entrust.net/rpa
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 21 18:12:46.469 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B1:31:FB:00:C0:F5:61:D9:4E:7F:AE:
                                A4:A6:3A:71:96:B8:96:A0:2F:0C:44:C5:D3:C2:38:E5:
                                55:1B:DB:D3:B4:02:20:37:49:2E:ED:9F:26:BA:D9:85:
                                2E:F9:6A:89:16:B0:D9:16:F0:84:7A:92:D4:A9:12:86:
                                B7:E3:A6:22:19:46:9F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 21 18:12:46.497 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A5:E6:A4:D2:89:31:8E:80:28:8D:21:
                                E0:D2:EB:69:85:4A:15:63:86:6F:7E:95:43:30:2C:8A:
                                C4:2E:AA:75:7E:02:20:11:AA:CD:1F:3B:67:D1:96:27:
                                54:46:46:99:E6:05:01:F0:5F:AF:3E:02:C4:EF:8F:CC:
                                EF:EB:EA:BA:A8:11:01
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 21 18:12:46.503 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:FF:C8:7F:F7:72:6F:76:27:16:91:CF:
                                8F:5E:8C:5E:65:3F:BD:9C:E4:43:B7:CE:CD:98:23:90:
                                C3:87:D4:45:81:02:21:00:88:41:9A:CA:B9:39:C0:2D:
                                40:CA:24:23:75:1F:26:71:33:D5:AD:D4:EA:14:04:5F:
                                AB:2C:7E:55:61:98:CD:CA
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        74:3d:f9:25:b1:e9:5c:39:a9:ac:83:e6:23:99:2a:e0:65:d8:
        c2:f8:c1:99:85:ba:be:b8:76:f6:91:c8:f7:b5:27:f4:70:00:
        01:fa:a1:d4:d2:34:aa:39:52:26:40:88:fc:63:5d:e4:b7:c7:
        11:6c:20:56:d7:5a:ca:c5:6a:da:66:c1:45:7c:d3:08:76:21:
        ff:74:6b:35:ff:23:fc:d1:0e:74:80:e9:98:39:35:00:ae:bd:
        0d:01:36:f2:86:4b:db:41:77:1d:5f:fe:67:42:77:c0:95:6e:
        c8:ee:af:3f:13:b7:d0:2f:7d:86:d8:30:8a:16:69:ec:f2:e8:
        13:10:bb:75:78:1c:af:71:28:3d:a4:fd:ec:a4:85:7a:af:24:
        71:1a:a3:48:71:d5:51:1c:80:51:a4:0f:c4:b5:6c:24:ef:d9:
        f6:24:2c:da:95:6f:19:6b:0c:7b:4d:e5:3a:bb:17:a6:ab:3f:
        b1:39:9d:2e:ec:65:9d:a6:2a:33:01:f4:fa:7e:bc:98:90:cd:
        58:a8:c0:e0:9b:c9:b2:85:f4:a8:a7:33:59:76:4c:2e:b9:a7:
        31:57:09:35:0f:63:80:42:0a:64:b4:9f:ac:d6:e8:36:26:4d:
        71:ca:d4:1d:e4:25:81:a2:e1:cb:2e:69:27:06:48:d5:3d:f6:
        e8:b0:27:dd