qa5701mbuqnxtapps.aetna.com

- Aetna Inc. -

Issued by Aetna Inc. Secure CA2

About this certificate

This digital certificate with serial number 07:40:f9:59:8c:46:d8:a8:7b:1e:d2:99:c0:ab:1b:d7 was issued on by Aetna Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aetna Inc.

Organization: Aetna Inc.
State / Province: Connecticut
Locality: Hartford
Country: US

Aetna Inc

Organization: Aetna Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:40:f9:59:8c:46:d8:a8:7b:1e:d2:99:c0:ab:1b:d7
Serial Number (int): 9641960384151962435460607642054630359
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2c:6b:18:dc:96:8d:cd:d1:46:fd:08:3e:eb:34:d2:ae:6c:76:3a:50
AuthorityKeyId: b9:ab:44:7a:fc:da:62:1b:09:1f:cf:3b:af:10:4b:89:81:14:63:23

Fingerprint (sha1): 22:3a:3f:d5:96:d3:14:3a:24:24:42:01:bc:40:40:10:92:fd:e5:b0
Fingerprint (sha256): 02:2c:90:57:0b:8c:78:00:a5:fc:37:49:c9:0d:3d:d8:a9:21:07:17:fc:9c:05:76:89:cc:84:96:67:4e:b6:98

Issuing Certificate URL: http://cacerts.digicert.com/AetnaIncSecureCA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/AetnaIncSecureCA2.crl
CRL Distribution Point: http://crl4.digicert.com/AetnaIncSecureCA2.crl

Check the revocation status for certificate qa5701mbuqnxtapps.aetna.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa5701mbuqnxtapps.aetna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa5701mbuqnxtapps.aetna.com

Other certificates including the domain name aetna.com

(limited to 100 certificates)
hyprprod.aetna.com
leapfrog-ssl-5.gcs-web.com
xrsconm3p.aetna.com
mvmpsccmcmp01.aeth.aetna.com
marketing-healthinsurance.aetna.com
leapfrog-ssl-5.gcs-web.com
DLPTestDevOps017.aetna.com
simplestepslife.aetna.com
prod.MQP591.aetna.com
cbhrcwss.aetna.com
stressapih6.aetna.com
dlptest020619.aetna.com
cats.ws.aetna.com
www.weaselect.aetna.com
client-v3wire.relaystaging.com
deviis117.aetna.com
test.MQT490.aetna.com
proddynamocm.aetna.com
strapi03mgr.int.aetna.com
test.MQT577.aetna.com
apipm.aetna.com
accessupgrade.art.aetna.com
www.bmshc.aetna.com
xaclddatapwr3q.aetna.com
eaz1eamppp10p.aetna.com
HFD-WC-VDC-2N.aetna.com
test.MQX023.aetna.com
obor-tpam.dev.ws.aetna.com
IndvRestIdMntSvc.ws.qa.aetna.com
MVMQAHHBEIS01.aeth.aetna.com
prod.MQP302.aetna.com
aebsqa2.aetna.com
lb2iib-sslhc-nonprod.aetna.com
webstats.aetna.com
test.MQS416.aetna.com
devstarsprovider.aetna.com
qa3ratebor.aetna.com
devdocs.aetna.com
api.aetna.com
qaintlweb.aetna.com
nab-az-vc02.aetna.com
WVMPQUMUVNEAP02.aeth.aetna.com
prod2ntlmauth.aetna.com
apih3.aetna.com
0628test-a.aetna.com
nice-ahm.aetna.com
agrc.aetna.com
ae94.aetna.com
sqacxt5-ws-pdloader.aetna.com
AHHBIDev.aetna.com
xaclddatapwr1d.aetna.com
vidg-m5qmgt.aetna.com
test.MQS570.aetna.com
WVMPQMXVSATAP01.aeth.aetna.com
amazon.aetna.com
transmitqa.aetna.com
mvmtcgaautoap01.aeth.aetna.com
federation.aetna.com
WVMPQMXVSAAAP05.aeth.aetna.com
drivertool.qa.ws.aetna.com
wvmqqmxvimsap02.aeth.aetna.com
devbawwc.aetna.com
ot.aetna.com
devappdynamics.aetna.com
prod.MQP425.aetna.com
xhadrepm2d.aetna.com
win-acs-wlan2-1.aetna.com
mvmpqmxvimsap02.aeth.aetna.com
teotest3.aetna.com
simplestepslife.aetna.com
devext.aetna.com
cloud.art.aetna.com
hepayorpreprod.aetna.com
www.aetna.com
salesforce.qapath3a.api.aetna.com
mvmpqmint20ap01.aeth.aetna.com
midpqmapsis02.aeth.aetna.com
MIDE-GSLBE-001-mgmt.aetna.com
prdyncm.aetna.com
trgvoluntary.aetna.com
qamember.aetna.com
test.MQQ341.aetna.com
prod.MQP376.aetna.com
PMDRDEV.aetna.com
mvmqnextitcap01.aeth.aetna.com
xnifiw1p.aetna.com
*.odbc.prodml.aetna.com
qaaetssomobile.aetna.com
stress2scm.aetna.com
wvmqaeirsis01.aeth.aetna.com
Dev2AFAAcctgservice.aetna.com
eimg.aetna.com
devci.aetna.com
test.MQQ830.aetna.com
stealthwatch-2.aetna.com
triplab.aetna.com
qa5701mbuqnxtapps.aetna.com
xtranet50.aetna.com
backupAgent.aetna.com
WVMTMDCE007IS01.aeth.aetna.com

Certificate

The complete raw certificate details for qa5701mbuqnxtapps.aetna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmajPSJaXZukHMtRFTQnu
/d7sa+j6quJVB6QqUFHJLJA/BbPIt0OGsWX0SwoNOR5F1eYsk5y51OVSkxG0OhAk
W8dlmtkveTPqmZCuIjbzXGHSCo+JNCoGRhEX3Vs3G+k1hrjtfF2i1srIfQh07p4U
Bujz5/MoTvmz9HcGHmHJ1G+hhikYAmN+J0+0c8TFWQtLwAD1q4mn43rIPImPbjEH
5xCei7XkjOrQPjhncI8nQ2al5nZVsT71GRxtfLZg0CSW6+M1t0gimFGQQ3jrv8BD
2GqCTfXiFlkx1PhSduVFVj5pHr0lkuVkkbT50OG7adX363+374LTBnoBIp4CwUTc
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9641960384151962435460607642054630359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc. Secure CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa5701mbuqnxtapps.aetna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19397703826062267862304150332730128320180363654617062790971212430436104712513653065976426104906354268905953529788662505479440469321810110464444080137955466840730412349870856010614947420253369653532986192323082696580659252672954751340591555848182902571886773670305079074796063937420634848919808037595190337565372755651083107613655897424149571948165921506871633615738716456381852126783767769453513808869776800075422988607683957782559128279240606144169959879354420113374366163480897530464159130271626696611656919105177672888879420652359289038528419083349230694233751854237597195680243859547256801721990459039816410782973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b9ab447afcda621b091fcf3baf104b8981146323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c6b18dc968dcdd146fd083eeb34d2ae6c763a50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa5701mbuqnxtapps.aetna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/AetnaIncSecureCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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