care.va.gov

- U.S. DEPARTMENT OF VETERANS AFFAIRS -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0d:e1:7b:98:50:e5:90:ad:d8:aa:33:0a:1c:ad:29:4b was issued on by DigiCert Inc.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

U.S. DEPARTMENT OF VETERANS AFFAIRS

Company registration number: Government Entity
Organization: U.S. DEPARTMENT OF VETERANS AFFAIRS
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:e1:7b:98:50:e5:90:ad:d8:aa:33:0a:1c:ad:29:4b
Serial Number (int): 18450737542472521913882273924718078283
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:e0:b6:ad:4b:68:03:09:cb:b2:c9:05:b0:8f:56:15:5d:b3:15:ba
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 8f:9c:34:a4:85:0a:ab:8d:d5:c9:50:9a:46:97:4e:52:80:a0:a0:49
Fingerprint (sha256): 00:fb:12:7f:b3:61:4b:83:da:be:20:d7:aa:2e:ad:f6:81:ac:a0:20:71:1e:4d:73:5c:85:b5:a1:9d:45:3b:9a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate care.va.gov

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for care.va.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

care.va.gov
pool.care.va.gov
PNNPCN0110.care.va.gov
PNNPCN0111.care.va.gov
PNNPCN0112.care.va.gov
PNNPCN0113.care.va.gov
PNSPCN0110.care.va.gov
PNSPCN0111.care.va.gov
PNSPCN0112.care.va.gov
PNSPCN0113.care.va.gov
PNEPCN0110.care.va.gov
PNEPCN0111.care.va.gov
PNEPCN0112.care.va.gov
PNEPCN0113.care.va.gov
PNWPCN0110.care.va.gov
PNWPCN0111.care.va.gov
PNWPCN0112.care.va.gov
PNWPCN0113.care.va.gov
PNEPCN0108.care.va.gov
PNEPCN0109.care.va.gov
PNEPCN01.care.va.gov
PNEPCN0101.care.va.gov
PNEPCN0102.care.va.gov
PNEPCN0103.care.va.gov
PNEPCN0104.care.va.gov
PNEPCN0105.care.va.gov
PNEPCN0106.care.va.gov
PNEPCN0107.care.va.gov
pnnpcn01.care.va.gov
pnnpcn0101.care.va.gov
pnnpcn0102.care.va.gov
pnnpcn0103.care.va.gov
pnnpcn0104.care.va.gov
pnnpcn0105.care.va.gov
pnnpcn0106.care.va.gov
pnnpcn0107.care.va.gov
pnnpcn0108.care.va.gov
pnnpcn0109.care.va.gov
PNSPCN01.care.va.gov
PNSPCN0101.care.va.gov
PNSPCN0102.care.va.gov
PNSPCN0103.care.va.gov
PNSPCN0104.care.va.gov
PNSPCN0105.care.va.gov
PNSPCN0106.care.va.gov
PNSPCN0107.care.va.gov
PNSPCN0108.care.va.gov
PNSPCN0109.care.va.gov
pnwpcn01.care.va.gov
pnwpcn0101.care.va.gov
pnwpcn0102.care.va.gov
pnwpcn0103.care.va.gov
pnwpcn0104.care.va.gov
pnwpcn0105.care.va.gov
pnwpcn0106.care.va.gov
pnwpcn0107.care.va.gov
pnwpcn0108.care.va.gov
pnwpcn0109.care.va.gov

Other certificates including the domain name va.gov

(limited to 100 certificates)
www.tee.va.gov
www.explore.va.gov
gfe.vpn.va.gov
www.cc.1vision.va.gov
m.pint.ebenefits.va.gov
www.visn2.va.gov
SERVICES.TEST.MDM.VA.GOV
vaww.media.eo.va.gov
*.shopvcs.va.gov
care.va.gov
prod.saas.box.va.gov
pint.vdc.va.gov
ccracommunity.va.gov
www.va.gov
www.cep.fsc.va.gov
www.patientadvocate.va.gov
rqm01.aide.oit.va.gov
nonprod.paas.mulesoft.va.gov
gibill.va.gov
m.va.gov
portal.nprod.vetbiz.va.gov
register.eauth.va.gov
www.ideas.research.va.gov
VABENEFITS.VBA.VA.GOV
ra.vpn.va.gov
yourit.va.gov
homeloans.va.gov
hybrid.va.gov
adfs.edeazclabs.va.gov
pint.sep.va.gov
HRIS.VA.GOV
www.vis.fsc.va.gov
preprod.fed.eauth.va.gov
rrc01.test.aide.oit.va.gov
*.vetride.va.gov
www.netresponse.medtronic.va.gov
m.va.gov
yourit-dev.va.gov
das.va.gov
mass.columbus.va.gov
www.energy.va.gov
www.itwd.oit.va.gov
prod.dip.va.gov
www.index.va.gov
www.pre.csp.va.gov
care.va.gov
vacagtest.vpn.va.gov
vagfe.vpn.va.gov
vdc.va.gov
www.listserv.va.gov
www.communityviewer.va.gov
care.va.gov
vaww.media.eo.va.gov
vaishwcs008.mdm.va.gov
tools.health.dev-developer.va.gov
casemgmt.int2.mbms.va.gov
www.rehab.research.va.gov
citrixaccesstest.va.gov
WWW.VOA.VA.GOV
www.va.gov
www.ihscepp.fsc.va.gov
staff.eva.va.gov
dev-developer.va.gov
www.escm-hcdev.va.gov
www.hcawsdev.va.gov
veteran.mobilehealth.va.gov
prod.saas.qualtrics.va.gov
citrixaccesseast.va.gov
adfs.edeazclabs.va.gov
www.netresponse.airwatch.medtronic.va.gov
casemgmt.perf.mbms.va.gov
mgmt.dev.care2.va.gov
filenet.pdt.vbms.aide.oit.va.gov
jira.devops.va.gov
benefits.vba.va.gov
www.ebenefits.va.gov
www.healthshareprod8.va.gov
RAPORTAL.VPN.VA.GOV
vip.vba.va.gov
cdceportal.va.gov
mrtfwfl01.vas.med.va.gov
www.valu.va.gov
prisma.vpn.va.gov
care.va.gov
care.va.gov
portal.lom.med.va.gov
www.mdssvh.aac.va.gov
services.test.mdm.va.gov
VP.evn.va.gov
www.tms.va.gov
veteranshealthlibrary.va.gov
idm.edeazclabs.va.gov
www.vendorportal.ecms.va.gov
www.vip-preprod.vetbiz.va.gov
services.eauth.va.gov
filenet.uat.vbms.aide.oit.va.gov
dev-api2.va.gov
vhacrrappdevhs5.vaco.va.gov
dev-api.va.gov
vetbiz.va.gov

Certificate

The complete raw certificate details for care.va.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EObhrSTQkC7t2e4p+AU
fK6bvipAB7GabUSu4rXEWzQXZINyB2cu13cy/NuVmkDJ9KqvNSILlmPRqv4mV/pC
nM8XXwD3Xww4vDoRQCswoQUnnqdpa+uelJhbT6Vyu2GJLBQb/YHctHxlVOxYttEi
rsHRYkkTjZz/XLy+YnqTCYMrC2/dWv7Mzp7XrIuAbHt+Rt4rUjRKnkmF1J2v+JT3
xkn3ZzPRKnCNsLIEIlJIEcdkqNJCUUF+8ZqYQ2mSyxGAVI3OhZgfJwlESOC3QSOj
H1YzgA7Uk5tGSiHlj150AzOtUG3nsg165Ptdj9juQ8GDF/qDjdlHJGUMXBdYXWxj
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18450737542472521913882273924718078283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. DEPARTMENT OF VETERANS AFFAIRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'care.va.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29320625264847497108013281449725580838711005447412056772037181360943100568482601431852897267659411995279507151033493677067031640698403356955332148520302675470000227763235560983095917936450901413600759407240131861949824630883710167205877116545529320363445165976954395051938288395662219630395897561800923242598094111457896600877948764325327708045203256358757669422367909653448256280437328658491899196211718364402978660849706557725005947869011120582381190979552099256696750012536769233263619638262420248296320730013926237260737906077748032494915829836325169482926345855319443159217405166266763957082827473508034608391119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62e0b6ad4b680309cbb2c905b08f56155db315ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNNPCN0110.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNNPCN0111.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNNPCN0112.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNNPCN0113.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0110.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0111.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0112.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0113.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0110.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0111.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0112.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0113.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNWPCN0110.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNWPCN0111.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNWPCN0112.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNWPCN0113.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0108.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0109.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN01.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0101.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0102.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0103.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0104.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0105.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0106.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNEPCN0107.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn01.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0101.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0102.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0103.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0104.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0105.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0106.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0107.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0108.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnnpcn0109.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN01.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0101.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0102.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0103.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0104.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0105.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0106.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0107.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0108.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PNSPCN0109.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn01.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0101.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0102.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0103.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0104.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0105.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0106.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0107.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0108.care.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwpcn0109.care.va.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018db814cf9f0000040300483046022100d3651d693d9969f9905bf6e69848186a1652020512bfc7a9bb97ae1b6a6a5b3b022100a6c325b8e92b7095650cf9b36b2299e5dd4c53da56a1df30be62f8876a3e3e4c0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018db814cfd7000004030047304502210089eb9d28ea56dcbeb90ee8018f6420c852b8d8c0ef52317d2a1233d07bcf7b4702205940a63cb2a76eb7fd2aae3aae1fbd89c471282455e1c6ddebfd9c018d30cf89007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018db814d0030000040300473045022012bd358e7ddd5842facae8260a9a0153f72b1ef4dc9c87da91eee789e26a017f022100a065f5eb5f94ccf1a9e111b70aad6605cf020e75837d3032cd18e2a9391c9b9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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