owa.hhs.gov

- United States Department of Health & Human Services -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:1e:35:32:eb:4b:e1:7c:f9:25:07:4a:9b:73:55:3b was issued on by DigiCert Inc.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Department of Health & Human Services

Organization: United States Department of Health & Human Services
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1e:35:32:eb:4b:e1:7c:f9:25:07:4a:9b:73:55:3b
Serial Number (int): 9461443878188286773226775848538035515
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3b:29:9d:92:41:8b:7e:e4:fe:e1:5e:40:e6:16:b1:90:44:25:ab:07
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 98:6e:2c:33:bb:50:56:19:5b:cf:c0:7e:73:48:c3:db:5b:fc:00:d0
Fingerprint (sha256): 00:e3:72:ee:ac:86:00:6a:d6:d6:10:61:f2:0b:b8:fb:a7:ad:8b:f2:87:1d:fa:0d:07:18:2a:8d:65:b6:74:35

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate owa.hhs.gov

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.hhs.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.hhs.gov
activesync.hhs.gov
autodiscover.acf.hhs.gov
autodiscover.acl.hhs.gov
autodiscover.ahrq.gov
autodiscover.ahrq.hhs.gov
autodiscover.aids.gov
autodiscover.aoa.gov
autodiscover.aoa.hhs.gov
autodiscover.bioethics.gov
autodiscover.cms.gov
autodiscover.cms.hhs.gov
autodiscover.ees.hhs.gov
autodiscover.email.foh.dhhs.gov
autodiscover.fatherhood.gov
autodiscover.foh.hhs.gov
autodiscover.hhs.gov
autodiscover.os.dhhs.gov
autodiscover.os.hhs.gov
autodiscover.psc.gov
autodiscover.psc.hhs.gov
autodiscover.samhsa.gov
autodiscover.questions.cms.hhs.gov
autodiscover.samhsa.hhs.gov
autodiscover.whaging.gov
autodiscover.whcoa.hhs.gov
hh-emscas15.ees.hhs.gov
hh-emscas16.ees.hhs.gov
hh-emscas17.ees.hhs.gov
hh-emscas18.ees.hhs.gov
hh-emscasarray20.ees.hhs.gov
pl-emscas10.ees.hhs.gov
pl-emscas11.ees.hhs.gov
pl-emscas12.ees.hhs.gov
pl-emscas13.ees.hhs.gov
pl-emscasarray10.ees.hhs.gov
webmail.hhs.gov
caspl.hhs.gov
cashhh.hhs.gov
pl-i2-exch1.ees.hhs.gov
pl-i2-exch2.ees.hhs.gov
pl-i2-exch3.ees.hhs.gov
pl-i2-exch4.ees.hhs.gov
hhh-i2-exch1.ees.hhs.gov
hhh-i2-exch2.ees.hhs.gov
hhh-i2-exch3.ees.hhs.gov
hhh-i2-exch4.ees.hhs.gov
hhh-i2-hybrid1.hhs.gov
hhh-i2-hybrid2.hhs.gov
hhh-i2-hybrid3.hhs.gov
hhh-i2-hybrid4.hhs.gov
pl-i2-hybrid1.hhs.gov
pl-i2-hybrid2.hhs.gov
pl-i2-hybrid3.hhs.gov
pl-i2-hybrid4.hhs.gov
HIV.gov
uspreventiveservicestaskforce.org
psoppc.org

Other certificates including the domain name hhs.gov

(limited to 100 certificates)
*.hhs.gov
eroom2.bardatools.hhs.gov
wecandothis.hhs.gov
ASPRTFS.HHS.GOV
data.hhs.gov
asprgis.hhs.gov
www.imp.cob.cms.hhs.gov
tips.oig.hhs.gov
ofarr.acf.hhs.gov
psr-ui.cms.hhs.gov
actmeetingserver.hhs.gov
api-tanfdata.acf.hhs.gov
www.cms.gov
asfrombapp.hhs.gov
swift.cms.hhs.gov
verilog.hhs.gov
owa.hhs.gov
portal-development.icas.hhs.gov
ncvhs.hhs.gov
TFS.CMS.HHS.GOV
forms.oig.hhs.gov
PartnerPortal.oig.hhs.gov
stg-asprportal.hhs.gov
hsmp-data.aspe.hhs.gov
eclkc.ohs.acf.hhs.gov
tst-sp2019.hhs.gov
www.cms.gov
Collider-Remote.cms.hhs.gov
*.oig.hhs.gov
adc-sfbfep1.fda.gov
stg-asprportal.hhs.gov
www.hhs.gov
nccd.cdc.gov
am.cms.hhs.gov
liheappm.acf.hhs.gov
oga.hhs.gov
www.healthcare.gov
www.cdc.gov
csportal.hhs.gov
*.dcis.hhs.gov
med.cms.hhs.gov
ufmsuat.hhs.gov
hhs.gov
prod-ndms.hhs.gov
dc1-prsmapov-01.oig.hhs.gov
www.hhs.gov
procurementforecast.hhs.gov
eftv2.cms.hhs.gov
psr-ui.cms.hhs.gov
staging.hses.ohs.acf.hhs.gov
stage.occms.acf.hhs.gov
fbistrg12c.hhs.gov
liheappm.acf.hhs.gov
impool2.fda.gov
www.cdc.gov
*.aspe.hhs.gov
emportal.hhs.gov
NDACAN.ACF.HHS.GOV
*.cloud.hhs.gov
taggs.hhs.gov
mrc-cms.hhs.gov
ocsecollab.acf.hhs.gov
collaborate-acl.hhs.gov
iknowtest.hhs.gov
collaborate-acl.hhs.gov
ncsacw.acf.hhs.gov
mec.cms.hhs.gov
akamai-san15.exacttarget.com
accelerate-integration.hhs.gov
asprprofiles.hhs.gov
www.cdc.gov
www.ahrq.gov
ghssvr-stg.hhs.gov
lms.learning.hhs.gov
Collider-aut.cms.hhs.gov
gal.hhs.gov
swift.aspr.hhs.gov
usphstraining.hhs.gov
liheapch.acf.hhs.gov
itsc-sts.o365.hhs.gov
www.safetyreporting.hhs.gov
prod-phe.hhs.gov
subscriptions.cms.hhs.gov
pl-auth01.hhsnet.hhs.gov
webinar3.cms.hhs.gov
stage.liheapch.acf.hhs.gov
www.cdc.gov
accelerate-staging.hhs.gov
www.cdc.gov
learning.hhs.gov
www.hmrffasttrac.acf.hhs.gov
accelerate-server.hhs.gov
*.aspe.hhs.gov
mail.nih.gov
pecos-fpd.cms.hhs.gov
*.cfsrportal.acf.hhs.gov
cccdpcr.thinkculturalhealth.hhs.gov
dr.itas.hhs.gov
MRC-STAGE.HHS.GOV
pecosai.cms.hhs.gov

Certificate

The complete raw certificate details for owa.hhs.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOUNYSHGwjG25FtxWyW+
KYZo+iXhNujNVGDD8exqCxPI4tYKSDeeZOXAUlFJYK9K2bwpH92c6YrjVdz49whk
A2i8yD/KsQLdX33hMcvbChasdyxShzOtyxkUFruQJsJ97zkzevmLMM+H28ylDQs/
OyBtC7dr/f8SErznTpHUMD7oZK9mqbSt+leyOm2yxA3GFlbxVelYjdAAyUcKSuQZ
fArVhMx3jGkq3SrpFbjNyqtPDSCP5xeVBNvy6ugurOrJUgHvsUTp04/MzQt5pdsH
Www5L1VZ5b2zd6D1W9ASb9HYJM8my7fJPDdOZe140vGS2RYFMOst0S7x/hPxoVmA
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9461443878188286773226775848538035515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'United States Department of Health & Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.hhs.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25865564093841326044255689594428676736169612771909973998473626018428116753374121573342539793402615336571896316905784785440215781341381520073302385697583790474406404235945993774383090144958553085534907696912429689277849656141624277102590589214015155685512402858513086411886123874562489122001833279902942000617098482608459119472188833572099626146500284077064134476792927520894052394993209773613540225284255105655949134315674404585460530404894971237781483322263706624671552666457807556742823666796647204597319684194687980465985425470482234675589238870992592848971034023485765913178158796400135672861266093683780791926851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b299d92418b7ee4fee15e40e616b1904425ab07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acf.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acl.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ahrq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ahrq.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aids.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aoa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aoa.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bioethics.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cms.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.email.foh.dhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fatherhood.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.foh.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.os.dhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.os.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.psc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.psc.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.samhsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.questions.cms.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.samhsa.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.whaging.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.whcoa.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-emscas15.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-emscas16.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-emscas17.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-emscas18.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-emscasarray20.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-emscas10.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-emscas11.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-emscas12.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-emscas13.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-emscasarray10.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caspl.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashhh.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-exch1.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-exch2.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-exch3.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-exch4.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-exch1.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-exch2.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-exch3.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-exch4.ees.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-hybrid1.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-hybrid2.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-hybrid3.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhh-i2-hybrid4.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-hybrid1.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-hybrid2.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-hybrid3.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-i2-hybrid4.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HIV.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspreventiveservicestaskforce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psoppc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001809af667ac00000403004730450220283150c5e9eb840541d1f56cb7e9d7bd46464348c75a563f09688e556fa26c33022100d65fa6c1d3792caeb8fb39a108936337bab1cbdc35d80a28fc5e9a4159601b4f00750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001809af667e60000040300463044022042630fe6b4359f7bd31d9323a3ca1edf26f3826839b6742f6941bcf3dc0508b4022065f54cc459ea79b262cb8ba48316e41d91a8282050f3e5b7df0de03569c5cb65007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001809af667e100000403004830460221009ecc1a6898d427976ed8c7b4d60680dfe31449df933f70e509ae7ff649eca4fd022100ef0d5c37429a2534ec25c77fb954d023a652d24f38287ac36fb3217d1a023040
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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