lb2iib-sslhc-nonprod.aetna.com

- Aetna Inc. -

Issued by Aetna Inc. Secure CA2

About this certificate

This digital certificate with serial number 02:4d:2f:2f:e6:fd:08:3f:d6:7d:63:52:5e:a2:dd:23 was issued on by Aetna Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aetna Inc.

Organization: Aetna Inc.
State / Province: Connecticut
Locality: Hartford
Country: US

Aetna Inc

Organization: Aetna Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:4d:2f:2f:e6:fd:08:3f:d6:7d:63:52:5e:a2:dd:23
Serial Number (int): 3059219918139472719942480045682122019
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 67:df:40:6e:b6:dc:f7:b9:f7:61:85:46:f2:1d:45:5e:cd:0c:65:66
AuthorityKeyId: b9:ab:44:7a:fc:da:62:1b:09:1f:cf:3b:af:10:4b:89:81:14:63:23

Fingerprint (sha1): 10:dc:a5:ca:ad:b9:1f:8b:54:73:75:40:ae:bb:38:ac:e9:be:4e:1e
Fingerprint (sha256): 00:8b:d4:25:b2:12:71:33:da:6c:f4:74:b4:47:09:8c:10:a4:26:64:1b:62:0d:34:cc:24:06:59:b5:5c:d5:38

Issuing Certificate URL: http://cacerts.digicert.com/AetnaIncSecureCA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/AetnaIncSecureCA2.crl
CRL Distribution Point: http://crl4.digicert.com/AetnaIncSecureCA2.crl

Check the revocation status for certificate lb2iib-sslhc-nonprod.aetna.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lb2iib-sslhc-nonprod.aetna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lb2iib-sslhc-nonprod.aetna.com

Other certificates including the domain name aetna.com

(limited to 100 certificates)
hyprprod.aetna.com
leapfrog-ssl-5.gcs-web.com
xrsconm3p.aetna.com
mvmpsccmcmp01.aeth.aetna.com
marketing-healthinsurance.aetna.com
leapfrog-ssl-5.gcs-web.com
DLPTestDevOps017.aetna.com
simplestepslife.aetna.com
prod.MQP591.aetna.com
cbhrcwss.aetna.com
stressapih6.aetna.com
dlptest020619.aetna.com
cats.ws.aetna.com
www.weaselect.aetna.com
client-v3wire.relaystaging.com
deviis117.aetna.com
test.MQT490.aetna.com
proddynamocm.aetna.com
strapi03mgr.int.aetna.com
test.MQT577.aetna.com
apipm.aetna.com
accessupgrade.art.aetna.com
www.bmshc.aetna.com
xaclddatapwr3q.aetna.com
eaz1eamppp10p.aetna.com
HFD-WC-VDC-2N.aetna.com
test.MQX023.aetna.com
obor-tpam.dev.ws.aetna.com
IndvRestIdMntSvc.ws.qa.aetna.com
MVMQAHHBEIS01.aeth.aetna.com
prod.MQP302.aetna.com
aebsqa2.aetna.com
lb2iib-sslhc-nonprod.aetna.com
webstats.aetna.com
test.MQS416.aetna.com
devstarsprovider.aetna.com
qa3ratebor.aetna.com
devdocs.aetna.com
api.aetna.com
qaintlweb.aetna.com
nab-az-vc02.aetna.com
WVMPQUMUVNEAP02.aeth.aetna.com
prod2ntlmauth.aetna.com
apih3.aetna.com
0628test-a.aetna.com
nice-ahm.aetna.com
agrc.aetna.com
ae94.aetna.com
sqacxt5-ws-pdloader.aetna.com
AHHBIDev.aetna.com
xaclddatapwr1d.aetna.com
vidg-m5qmgt.aetna.com
test.MQS570.aetna.com
WVMPQMXVSATAP01.aeth.aetna.com
amazon.aetna.com
transmitqa.aetna.com
mvmtcgaautoap01.aeth.aetna.com
federation.aetna.com
WVMPQMXVSAAAP05.aeth.aetna.com
drivertool.qa.ws.aetna.com
wvmqqmxvimsap02.aeth.aetna.com
devbawwc.aetna.com
ot.aetna.com
devappdynamics.aetna.com
prod.MQP425.aetna.com
xhadrepm2d.aetna.com
win-acs-wlan2-1.aetna.com
mvmpqmxvimsap02.aeth.aetna.com
teotest3.aetna.com
simplestepslife.aetna.com
devext.aetna.com
cloud.art.aetna.com
hepayorpreprod.aetna.com
www.aetna.com
salesforce.qapath3a.api.aetna.com
mvmpqmint20ap01.aeth.aetna.com
midpqmapsis02.aeth.aetna.com
MIDE-GSLBE-001-mgmt.aetna.com
prdyncm.aetna.com
trgvoluntary.aetna.com
qamember.aetna.com
test.MQQ341.aetna.com
prod.MQP376.aetna.com
PMDRDEV.aetna.com
mvmqnextitcap01.aeth.aetna.com
xnifiw1p.aetna.com
*.odbc.prodml.aetna.com
qaaetssomobile.aetna.com
stress2scm.aetna.com
wvmqaeirsis01.aeth.aetna.com
Dev2AFAAcctgservice.aetna.com
eimg.aetna.com
devci.aetna.com
test.MQQ830.aetna.com
stealthwatch-2.aetna.com
triplab.aetna.com
qa5701mbuqnxtapps.aetna.com
xtranet50.aetna.com
backupAgent.aetna.com
WVMTMDCE007IS01.aeth.aetna.com

Certificate

The complete raw certificate details for lb2iib-sslhc-nonprod.aetna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivUJ55ovq7jYrfA81GjF
HfjkUSZQV2bEkDWfaDBG+STdPfRhoTl1B03tM/3aq7pRkiQYLFg7n5x++UxGHBQ0
9trn2Q+Nn/cIB2C3yay6J8uJznkiTA/rDcbKqxb5M0aTO4sJ0i3ghZz9FySdUyeo
hivzSdWcbCZzcBkh9Q9VTf5/dRyn25c4WKJDv/REacLvmq5CT+m5T/u1VbJDYAJb
0IoFk6Pry74QFAwXaw47k8tcy4Vt2utVMwyfRsfo9MDi5WFZzKpYntucW3l2sMgL
eKNuvjTRiUghRWK6Zczj4ys4rOyonq8WbJFeIOfwfw0XG2dHPGBoi0/L49ir9cTx
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3059219918139472719942480045682122019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc. Secure CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lb2iib-sslhc-nonprod.aetna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17541719166974439579191481146987225304260359248105534014934874620419017694952730968560671965941212081493644803057678177891277877974501141904840968129009261581416438799944998480779633851782213490789160075804125505472253100316987852992028328918130058744634685980247619764306960665022670713149926700362591415278237291936335349892428204866823062657351943290106583630122717892879776713668889587766994700561926978416163692622943709061294628830251125846314918715534312700839082711676618029287099250066305170604999327252069764008853598906501555796054744156887187392033784014989470698394393645803440048953113671909355116884421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b9ab447afcda621b091fcf3baf104b8981146323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67df406eb6dcf7b9f7618546f21d455ecd0c6566
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb2iib-sslhc-nonprod.aetna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/AetnaIncSecureCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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