Dev2AFAAcctgservice.aetna.com

- Aetna Inc. -

Issued by Aetna Inc. Secure CA2

About this certificate

This digital certificate with serial number 08:58:c0:20:8c:19:3d:61:80:cd:e1:a1:33:70:79:0e was issued on by Aetna Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aetna Inc.

Organization: Aetna Inc.
State / Province: Connecticut
Locality: Hartford
Country: US

Aetna Inc

Organization: Aetna Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:58:c0:20:8c:19:3d:61:80:cd:e1:a1:33:70:79:0e
Serial Number (int): 11094642891133907775170969063438448910
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:90:fe:bd:46:32:89:35:19:e2:d6:91:a2:64:62:b8:62:53:77:59
AuthorityKeyId: b9:ab:44:7a:fc:da:62:1b:09:1f:cf:3b:af:10:4b:89:81:14:63:23

Fingerprint (sha1): c1:88:3a:d8:5e:53:06:56:86:2b:68:a4:eb:67:06:0a:59:30:15:01
Fingerprint (sha256): 02:02:0e:5f:fe:0e:95:2e:f7:0f:a4:47:ad:c3:9d:41:30:b1:6a:5b:74:86:e4:a3:d7:c9:0b:35:3b:b5:78:89

Issuing Certificate URL: http://cacerts.digicert.com/AetnaIncSecureCA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/AetnaIncSecureCA2.crl
CRL Distribution Point: http://crl4.digicert.com/AetnaIncSecureCA2.crl

Check the revocation status for certificate Dev2AFAAcctgservice.aetna.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Dev2AFAAcctgservice.aetna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Dev2AFAAcctgservice.aetna.com

Other certificates including the domain name aetna.com

(limited to 100 certificates)
hyprprod.aetna.com
leapfrog-ssl-5.gcs-web.com
xrsconm3p.aetna.com
mvmpsccmcmp01.aeth.aetna.com
marketing-healthinsurance.aetna.com
leapfrog-ssl-5.gcs-web.com
DLPTestDevOps017.aetna.com
simplestepslife.aetna.com
prod.MQP591.aetna.com
cbhrcwss.aetna.com
stressapih6.aetna.com
dlptest020619.aetna.com
cats.ws.aetna.com
www.weaselect.aetna.com
client-v3wire.relaystaging.com
deviis117.aetna.com
test.MQT490.aetna.com
proddynamocm.aetna.com
test.MQT577.aetna.com
apipm.aetna.com
accessupgrade.art.aetna.com
www.bmshc.aetna.com
xaclddatapwr3q.aetna.com
eaz1eamppp10p.aetna.com
HFD-WC-VDC-2N.aetna.com
test.MQX023.aetna.com
obor-tpam.dev.ws.aetna.com
IndvRestIdMntSvc.ws.qa.aetna.com
MVMQAHHBEIS01.aeth.aetna.com
prod.MQP302.aetna.com
aebsqa2.aetna.com
lb2iib-sslhc-nonprod.aetna.com
webstats.aetna.com
test.MQS416.aetna.com
devstarsprovider.aetna.com
qa3ratebor.aetna.com
devdocs.aetna.com
api.aetna.com
qaintlweb.aetna.com
nab-az-vc02.aetna.com
WVMPQUMUVNEAP02.aeth.aetna.com
prod2ntlmauth.aetna.com
apih3.aetna.com
0628test-a.aetna.com
nice-ahm.aetna.com
agrc.aetna.com
ae94.aetna.com
sqacxt5-ws-pdloader.aetna.com
AHHBIDev.aetna.com
xaclddatapwr1d.aetna.com
vidg-m5qmgt.aetna.com
test.MQS570.aetna.com
WVMPQMXVSATAP01.aeth.aetna.com
amazon.aetna.com
transmitqa.aetna.com
mvmtcgaautoap01.aeth.aetna.com
federation.aetna.com
WVMPQMXVSAAAP05.aeth.aetna.com
drivertool.qa.ws.aetna.com
wvmqqmxvimsap02.aeth.aetna.com
devbawwc.aetna.com
ot.aetna.com
devappdynamics.aetna.com
prod.MQP425.aetna.com
xhadrepm2d.aetna.com
win-acs-wlan2-1.aetna.com
mvmpqmxvimsap02.aeth.aetna.com
teotest3.aetna.com
simplestepslife.aetna.com
devext.aetna.com
cloud.art.aetna.com
hepayorpreprod.aetna.com
www.aetna.com
salesforce.qapath3a.api.aetna.com
mvmpqmint20ap01.aeth.aetna.com
midpqmapsis02.aeth.aetna.com
MIDE-GSLBE-001-mgmt.aetna.com
prdyncm.aetna.com
trgvoluntary.aetna.com
qamember.aetna.com
test.MQQ341.aetna.com
prod.MQP376.aetna.com
PMDRDEV.aetna.com
mvmqnextitcap01.aeth.aetna.com
xnifiw1p.aetna.com
*.odbc.prodml.aetna.com
qaaetssomobile.aetna.com
stress2scm.aetna.com
wvmqaeirsis01.aeth.aetna.com
Dev2AFAAcctgservice.aetna.com
eimg.aetna.com
devci.aetna.com
test.MQQ830.aetna.com
stealthwatch-2.aetna.com
triplab.aetna.com
qa5701mbuqnxtapps.aetna.com
xtranet50.aetna.com
backupAgent.aetna.com
WVMTMDCE007IS01.aeth.aetna.com
qacqweb.aetna.com

Certificate

The complete raw certificate details for Dev2AFAAcctgservice.aetna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1nGdJj0LWh2bt1eCxsr
GCRPsREK/0WYZG5EmOAHn02KABsGOtCK9DceznO78LW6XEeHmtnDjdxuElmsi+K6
Gg8ve0sAdJhrE3a3O2Y25YmVYzKYDYTVJMtDh16yNeH0HE5aNsL2aFG09MpcIysk
QdM/Myh7sko0XzrHF4bW4UzCiRKEI7+FAqYnkvv93dykmoVlNzohJhJzmnYrXq6A
8nSGkko6bz4POcwz11Bk2t+3JGJi6QuUMMarj/zwoPIi/DlLFr8HmMR+bmKVSvdh
SbFY0V+E3x1zncgtRgTdbNMUE86C83HVA8f0n/lr+eQrZ061+9rYE9HTheCzr0Zu
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11094642891133907775170969063438448910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc. Secure CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dev2AFAAcctgservice.aetna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23650832837934704002905260415749342844925555091422268024571490688319577358701033688397484877016581080190551778313294481426440337817527278250347158221560343366622505558370919176934003549875692468957685643786005169611483382720140932743695315634885682151561573256901072354010868287296895832036183887955805898317797806440182387525004850611051356625912632134072766542746000551937020714204668675428007216930184370382761391775290896145681001938761647059703815139422401565071634275028992711292570963003098155388724258747741660009468470955926800324639918074096604550471909207219710347503975475262740038675605354048615667363419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b9ab447afcda621b091fcf3baf104b8981146323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df90febd4632893519e2d691a26462b862537759
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dev2AFAAcctgservice.aetna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/AetnaIncSecureCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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