ssopacorp-elr-dev.uhg.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number fc:d0:90:93:e6:0f:8f:c1:ba:28:3b:e0:f9:cd:57:2e was issued on by COMODO CA Limited.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Optum Tech ETP & Info Srvcs
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): fc:d0:90:93:e6:0f:8f:c1:ba:28:3b:e0:f9:cd:57:2e
Serial Number (int): 336048385069097224574138676239372474158
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 85:15:1c:ac:83:56:0b:62:79:ff:81:1f:3f:75:a5:48:6c:b6:c6:bb
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): a9:4f:e9:79:da:49:66:f4:48:6f:63:ac:a5:1f:74:06:b2:62:a9:da
Fingerprint (sha256): 02:20:6f:82:28:6c:1b:c7:d0:3a:94:c6:b2:ba:a4:23:14:1f:16:bf:8d:11:33:7d:e9:36:f5:17:3c:62:7b:fe

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ssopacorp-elr-dev.uhg.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssopacorp-elr-dev.uhg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssopacorp-elr-dev.uhg.com
acis-dev.uhc.com
acis-devpa.uhc.com
cdbportal-atst-oso.optum.com
cdbportal-buat-oso.optum.com
edms-ui-auth-dev.optum.com
edms-ui-auth-sys.optum.com
iamselfservice-dev.optum.com
icaredev.uhc.com
pademo-dev.uhg.com
ssoiamcorp-nonprod.uhg.com
ssoiamcorp-np.uhg.com
ssopacorp-dev.optum.com
ssopacorp-dev.uhc.com
ssopacorp-dev.uhg.com

Other certificates including the domain name uhg.com

(limited to 100 certificates)
uhgvision-mwp-uat.uhg.com
taxadmin-test.uhg.com
ssopacorp-ctc-dev.uhg.com
external-redirect-corpsys-prod.uhg.com
discounts.uhg.com
e1099.unitedhealthgroup.com
ifsstg.uhg.com
ltmelrstgcorp1.uhc.com
ssopacorp2extra-dev.uhg.com
psfinren-test.uhg.com
globalselfservice-test.uhg.com
uhgfidelity.uhg.com
federate.uhg.com
ssopacorp-elr-dev.uhg.com
securityplatform-dev.optum.com
globalselfservice-elr.unitedhealthgroup.com
bankdata.uhg.com
hrdirecthelpdesk-test.uhg.com
signon.uhg.com
demo58-ihrconnect.uhg.com
external-redirect-corpsys-prod.uhg.com
webex.uhg.com
scm-stg.uhg.com
aaweb.uhc.com
vertex-test.uhg.com
copsarchive-stg.uhg.com
ssopacorp2extra-stg.uhg.com
ssopacorp-stg.uhg.com
www-stage-tmp.unitedhealthgroup.com
benefitslogout.uhg.com
authgateway3.entiam.uhg.com
ssopacorp-elr-dev.uhg.com
ssopacorp-ctc-dev.uhg.com
uhgvision-mwp.uhg.com
wapdmzfe.optum.com
authgateway3proxy-stg.entiam.uhg.com
image.international.qbe.com
authgateway3.entiam.uhg.com
vertexrpt-dev.uhg.com
cultureambassador.uhg.com
domotest.uhg.com
copsarchive.uhc.com
epasstst.uhg.com
careers-index.uhg.com
csot.optum.com
e1099.unitedhealthgroup.com
orbit-microstrategy-mob10.uhg.com
ai.uhg.com
vitalsigns2017logout-test.uhg.com
ssopacorp2extra-dev.uhg.com
ssopacorp-elr-dev.uhg.com
e1099.unitedhealthgroup.com
emailimages.uhg.com
copsarchive-filevending-tst.uhg.com
uhgvision-uat.uhg.com
copsarchive.uhc.com
www-2018.unitedhealthgroup.com
scm-stg.uhg.com
emailimages.uhg.com
image.international.qbe.com
ssopacorp-ctc-dev.uhg.com
ssopacorp-elr-dev.uhg.com
hub.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
ltmctcprdcorp3.uhc.com
federatedr.uhg.com
benefitslogout.uhg.com
myfinance.uhg.com
www.unitedhealthgroup.com
epasstst.uhg.com
ssopacorp-stg.uhg.com
healthshare.uhg.com
uhgvision-txn-uat.uhg.com
uhgvision-pwp.uhg.com
globalselfservice-clock-stage.uhg.com
ssopfcorp2-dev-srv.uhg.com
communications.uhg.com
copsarchive-ingestion.uhc.com
concur.uhc.com
externalaffairs.uhg.com
copsarchive.uhg.com
uhgvision-stg.uhg.com
image.international.qbe.com
ssoiamextra.uhg.com
volunteering-test.uhg.com
copsarchive-filevending-tst.uhc.com
san-3-s10.tlsprovisioning.exacttarget.com
benefitsenrolltest.uhg.com
image.international.qbe.com
sso.uhg.com
ssoiamextra-stg.uhg.com
recognition.uhg.com
orbit-microstrategy-mob10.uhg.com
talentacquisition-pz-stage.uhg.com
ssopacorp-ctc-dev.uhg.com
globalselfservicecsrstg.uhg.com
ntssocorp4stg-ctc.uhc.com
sso-int.uhg.com
ihrconnect.uhg.com
ssopacorp-ctc-dev.uhg.com

Certificate

The complete raw certificate details for ssopacorp-elr-dev.uhg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ4grakfcgs8P1rqhZtw
+XogFrN4aDJ71a2y8rI07gkKIQLT98fKW0Vj4qI0v/7Ts2XqaXzGsfV4CpFCsLoq
bp+d5efgETK1C20r80u040pAFGqY7NwIeDLT/5qsPlrkZbp1szKb5rTX70p+puRX
ChgGdb1DYyc2Neg9owgjQhgMjfEaVMmJC7UqqqT1wq1ntuLRJXGZqd6Whv9Z7+02
Gg2Ab1zWxU0jZd6sllfdN96m6acalj5QZqOeVm+XzcZqiJbBV7DMdnHwEaAm4uBq
4CjZXmZF9WD2f0/z5X+Lvd7Bpy20bfkSHrjQUc26hIbS5ZWUeuXwZHRTJH3c7xed
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336048385069097224574138676239372474158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Optum Tech ETP & Info Srvcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssopacorp-elr-dev.uhg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17751338345582029271427910002159559797190006330622662340992760408050863050830518501338837307270409570629577058322506842598420834904297234101369331201931762499900750639858068246386978436989160547699662247188139871489124894473632090351745733602230938390597156245369779623648700254938675147918702804168843618246734151300445742514055283486361124598110639273488952876266227229999858191542373712308853994130245318381110025810692099964142919072454624850651295512093085507638755559538967524965836234056204221547768635670855170868423450443396743594800402028604565453145213341573772999389735461906295648983360606159971496205811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85151cac83560b6279ff811f3f75a5486cb6c6bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (375 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopacorp-elr-dev.uhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acis-dev.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acis-devpa.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbportal-atst-oso.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbportal-buat-oso.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edms-ui-auth-dev.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edms-ui-auth-sys.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamselfservice-dev.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaredev.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pademo-dev.uhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoiamcorp-nonprod.uhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoiamcorp-np.uhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopacorp-dev.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopacorp-dev.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopacorp-dev.uhg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164850638df0000040300473045022100cda8003780a965e8561deacac9455207540d972fc619bb22ea418270e19eff3802203120d33571434e42e170a7deeecf458e97d6d0721006dfb07f5feaef75f7c20b007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001648506392900000403004730450221008a661167a7745c7ec0ef9e30235d33177f583741baca2a19b2d082c91eee907502203d5716ecfb3eb1a902ad2a30e25f749935508dd5d0b25dc5827b9bf362f0517d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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