oireportsstage.optuminsight.com

- UnitedHealth Group Inc. -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 83:f0:58:40:45:3b:08:04:77:1a:ec:c4:ae:a9:c6:45 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: SSM&O Web Operations
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 83:f0:58:40:45:3b:08:04:77:1a:ec:c4:ae:a9:c6:45
Serial Number (int): 175376808637945690403492301845377435205
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3b:42:6d:cb:83:c6:31:23:7c:14:0d:39:14:d6:6d:24:b8:6a:c4:04
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): 33:7b:ef:79:95:1c:8f:31:ff:27:5d:3a:ed:e8:cb:c3:f9:17:04:74
Fingerprint (sha256): 02:14:51:8c:8c:59:96:82:d0:d3:5a:e9:0c:30:11:0e:8b:f6:fe:c7:3a:ca:2f:aa:fb:6b:76:f5:48:bc:e8:1e

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate oireportsstage.optuminsight.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oireportsstage.optuminsight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oireportsstage.optuminsight.com
oireportsstage.optum.com

Other certificates including the domain name optuminsight.com

(limited to 100 certificates)
optuminsight.com
unionstation.optuminsight.com
oireportsstage.optuminsight.com
enterprisewebui-perfenv-signalr.optuminsight.com
unionstation.optuminsight.com
icc-iss.optuminsight.com
meetingtracker.optuminsight.com
staging-unionstation.optuminsight.com
mwccfeeschedule.optum.com
cmug.optuminsight.com
meetingtrackerstage.optuminsight.com
ecac.optuminsight.com
dowc.optuminsight.com
staging-unionstation.optuminsight.com
info.optum.com
preview-ecac-signalr.optuminsight.com
preview-ecac-signalr.optuminsight.com
mwccfeeschedule.optum.com
mwccfeeschedule.optum.com
onlinechat.optuminsight.com
meetingtracker.optuminsight.com
icc-iss.optuminsight.com
ecac-signalr.optuminsight.com
viewpointsstageedit.optuminsight.com
ecac-signalr.optuminsight.com
stageedit.optuminsight.com
ignite.optuminsight.com
preview-naas.optuminsight.com
meetingtracker.optuminsight.com
onlinechat.optuminsight.com
cmugstage2.optuminsight.com
api.1k-2rs14.impactprors.optuminsight.com
dvprod.optum.com
cmug.optuminsight.com
iwcstage2.optuminsight.com
dvprod.optum.com
ignite.optuminsight.com
icc-iss.optuminsight.com
clinformatics.optuminsight.com
icc-iss.optuminsight.com
staging-naas.optuminsight.com
demo.optuminsight.com
iwcstage2.optuminsight.com
ioca.optuminsight.com

lewinprod.optuminsight.com
learning.optuminsight.com
onlinechat.optuminsight.com
www.optumreports.com
clinformatics.optuminsight.com
unionstation.optuminsight.com
icc-iss.optuminsight.com
clinformatics.optuminsight.com
optuminsight.com
inventory.optuminsight.com
api.aj-xx5.impactprors.optuminsight.com
meetingtracker.optuminsight.com
naas.optuminsight.com
*.impactprors.optuminsight.com
clinformatics.optuminsight.com
ioca.optuminsight.com
dowc.optuminsight.com
inventory.optuminsight.com
ignite.optuminsight.com
ignite.optuminsight.com
learning.optuminsight.com
enterprisecdi.optuminsight.com
crugstage2.optuminsight.com
icc-iss.optuminsight.com
dowc.optuminsight.com
dvprod.optum.com
crug.optuminsight.com
info.optum.com
mwccfeeschedule.optum.com
aj-xx5.impactprors.optuminsight.com
inventory.optuminsight.com
optuminsight.com
oireportsstage.optuminsight.com
oireportsstage.optuminsight.com
enterprisewebui-perfenv.optuminsight.com
stageedit.optuminsight.com
demo.optuminsight.com
icc-iss.optuminsight.com
meetingtrackerstage.optuminsight.com
viewpointsstageedit.optuminsight.com
learning.optuminsight.com
stagingcac.optuminsight.com
mwccfeeschedule.optum.com
previewcac.optuminsight.com
iwcc.optuminsight.com
staging-ecac-signalr.optuminsight.com
onlinechat.optuminsight.com
preview-naas.optuminsight.com
dowc.optuminsight.com
info.optum.com
enterprisecac.optuminsight.com
demo.optuminsight.com
enterprisecac.optuminsight.com
staging-ecac-signalr.optuminsight.com
optuminsight.com

Certificate

The complete raw certificate details for oireportsstage.optuminsight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIvp5sR5ZCqlGnj/ipJt
FV+/UAjm6xpuQdlioDfUWbmvQ6Xbk2KZJuDgucSX+P28lStNfR2prwuuufNb0Lgx
9ES/Y25BG4deUIUKFDq6PsnnMJWr1wzeONdMpmx1oKwWrYU2KyoTZb4yWV/yCUZv
rzEQtPxdMyi7TNAZOS2TjD75WtxBKSI3a6SC0q7dk6QwnTT4Ekqgt8bSUpxmDjF9
FtA/CxEF4A0o2DUv1IppqUZTdkRqK1LR1l4eKmivX6sx7ms4xFjtw+zDWW+OZg+p
bvA0mMpF4Io9E400vTeerR/gagFmCeVeXSKiFmijjtt4X2dh8/SHEa4+XY+E5kY+
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 175376808637945690403492301845377435205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SSM&O Web Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oireportsstage.optuminsight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24811701779155802855001612824061032948546154439813792173572461689731219262063148427756790487625935875950646159557402802477039659000351693471766369377537302015908565615133606216368214904217059918714826279572222192726221520946077301987992650670698241588166900606786153724162390567215848903029478633037754729066985887100452703814041204075424149156562390271711397137185339901855735559987493605571423254099211044616999312383205162598926539338787141167338036849674056171030802749606010573872432591948851793171342781490007664107384547942914790573280081789960637437897129955871706921229284436724360728308311406219001598459461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b426dcb83c631237c140d3914d66d24b86ac404
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oireportsstage.optuminsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oireportsstage.optum.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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