ees-stage3.optum.com
- UnitedHealth Group Inc. -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 41:d2:2f:07:e4:fc:23:5e:f3:a7:08:ac:ec:8f:cc:c8 was issued on by COMODO CA Limited.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
UnitedHealth Group Inc.
Organization:
UnitedHealth Group Inc.
State / Province:
Minnesota
Country: US
Country: US
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 41:d2:2f:07:e4:fc:23:5e:f3:a7:08:ac:ec:8f:cc:c8Serial Number (int): 87491155965027753349286568621656493256
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 31:c6:a4:21:3d:9d:d4:57:89:6d:fc:b4:cd:98:7d:ae:c2:cf:5e:26
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): 32:67:ea:22:f2:1a:8a:e7:55:0e:3e:8e:1c:c6:1f:b3:ce:2d:18:14
Fingerprint (sha256): 02:3d:1f:ca:15:26:3e:4b:64:e7:20:fd:1f:0a:41:71:07:01:39:02:59:39:a3:20:1b:f6:a9:76:e2:b9:3e:b7
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate ees-stage3.optum.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ees-stage3.optum.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ees-stage3.optum.com
Other certificates including the domain name optum.com
(limited to 100 certificates)
rxanalytics.optum.com
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
service-now-auth-stage.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
stg-etg.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
prdirx-rxview.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
demo-oidc.stepwise.optum.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net
fs2-stagedmz-ose3.optum.com
cert00047-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
caseman-bfx.optum.com
api.bahubali.cdml-dev.optum.com
dashboard-api.edan.cdml-dev.optum.com
cert00007-azurecdn.akamaized.net
edi-276clmstsinq-alpha1.optum.com
cm.optum.com
ie-mn-cp-demo.optum.com
devbase.optum.com
ie-appsvc-dmz.optum.com
store.optum.com
stg-nyapd-int.optum.com
ks1.optum.com
reskinstage-o360.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
service-now-auth-stage.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
stg-etg.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
prdirx-rxview.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
demo-oidc.stepwise.optum.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net
fs2-stagedmz-ose3.optum.com
cert00047-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
caseman-bfx.optum.com
api.bahubali.cdml-dev.optum.com
dashboard-api.edan.cdml-dev.optum.com
cert00007-azurecdn.akamaized.net
edi-276clmstsinq-alpha1.optum.com
cm.optum.com
ie-mn-cp-demo.optum.com
devbase.optum.com
ie-appsvc-dmz.optum.com
store.optum.com
stg-nyapd-int.optum.com
ks1.optum.com
reskinstage-o360.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
Certificate
The complete raw certificate details for ees-stage3.optum.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3jCCBcagAwIBAgIQQdIvB+T8I17zpwis7I/MyDANBgkqhkiG9w0BAQsFADCB ljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPDA6BgNV BAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMzA2MjYwMDAwMDBaFw0yNDA2MjUyMzU5NTlaMGIxCzAJBgNV BAYTAlVTMRIwEAYDVQQIEwlNaW5uZXNvdGExIDAeBgNVBAoTF1VuaXRlZEhlYWx0 aCBHcm91cCBJbmMuMR0wGwYDVQQDExRlZXMtc3RhZ2UzLm9wdHVtLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMY9CztExyYskM6hb1RE0fyMhBCO YSgzYAy1jlrZWzATM3pFewIIqJ4eXg1Dm/aSjLmTEynXfDTGE2/nrLWfpyL7MYGG 2H79NpblNoZRjEjwT7+zL9Qzim6Ut/9OkT6pXfs778ITUwYOyAnbST/NGB0QCS6G 0758s1BDMMMJCB7wsSokK1EF/ThiyFDc+XZLpO39eZhv5S9AESiok/ltH6WS+eU5 Jq6354bmEEPR9V/JyiBXQIENnWtI3+ZJWR88/oWFgR/au72os3UOY5Cw/UmjN0Wn diFPsFhuC6nfcAoDOEejCGLNAyiIH0IaPKjr8U8FEGaFBSmxzjRZrp7XEz0CAwEA AaOCA1kwggNVMB8GA1UdIwQYMBaAFJrzK9rPrU+2L7sqSEgqErcbQsEkMB0GA1Ud DgQWBBQxxqQhPZ3UV4lt/LTNmH2uws9eJjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMw QTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdv LmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwu Y29tb2RvY2EuY29tL0NPTU9ET1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1 cmVTZXJ2ZXJDQS5jcmwwgYsGCCsGAQUFBwEBBH8wfTBVBggrBgEFBQcwAoZJaHR0 cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPUlNBT3JnYW5pemF0aW9uVmFsaWRh dGlvblNlY3VyZVNlcnZlckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au Y29tb2RvY2EuY29tMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgB2/4g/Crb7 lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYj2Qe+YAAAEAwBHMEUCIE8dKU4B 240PP1BqOz27uKR1oxaqGGKMa0AMlCneWwX9AiEAzWGxqV1jyyDNKVMmFqH3TCDT AbjVS24Et5TkQ2nqptkAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7 qwAAAYj2Qe/tAAAEAwBGMEQCIADKAriKBtLcRvRNS/4ixoYvrDt3qwCg1QCNb55D a5mFAiAS/d84hsN/D1WN3aAtRVNRIjS485G+T9T9MYehnpZv0QB2AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiPZB78cAAAQDAEcwRQIhAKSw3wdH EKhZ2YmM83e8nOgyTJZe6cCg9HMxwfw1Wb/tAiAn2QAbJlRBRkHM4pVEfFwLweJe TYAyxZBYbxX6vmf7XDAfBgNVHREEGDAWghRlZXMtc3RhZ2UzLm9wdHVtLmNvbTAN BgkqhkiG9w0BAQsFAAOCAQEAJhgFOJShYIF1Ii6oLlC59k5TCw068nFhhxc4h057 /ExbfpHLRc2wlHBGnixXbvNQ+SLQVUUl8Y7htAbqXMUKXDcYXUFmqqs4EtvGiGEe QtOn2xUYnnHJTOwd5HW//OqrfMNusLQbAI4Ftjc/9PCVx+HhAJ6dPYflfumssdPL KImfQ3F9iFPkxVAk3ZAEHglbvYovPxCFLXGZhyd+CpyOxeh3/l9Q/ZrA7hzcZJkQ cV/mt4P3sCsxZKA3giBhwTR4Qvj2QpezOOe4KRwbHl8gYUT8jxqETi/0/0ZltIIl 26m8RLGGJMi3qhd2l6XeKyKqpfZydgsKJECNJ/JiDIeYqA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj0LO0THJiyQzqFvVETR /IyEEI5hKDNgDLWOWtlbMBMzekV7Agionh5eDUOb9pKMuZMTKdd8NMYTb+estZ+n IvsxgYbYfv02luU2hlGMSPBPv7Mv1DOKbpS3/06RPqld+zvvwhNTBg7ICdtJP80Y HRAJLobTvnyzUEMwwwkIHvCxKiQrUQX9OGLIUNz5dkuk7f15mG/lL0ARKKiT+W0f pZL55TkmrrfnhuYQQ9H1X8nKIFdAgQ2da0jf5klZHzz+hYWBH9q7vaizdQ5jkLD9 SaM3Rad2IU+wWG4Lqd9wCgM4R6MIYs0DKIgfQho8qOvxTwUQZoUFKbHONFmuntcT PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87491155965027753349286568621656493256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ees-stage3.optum.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25025286239025639780437432646127939742039231149843100915579578435554743537445868233390015945609412400251961990022626512082079474552052187431857609760229819290380200253481407133842185143099632090695517864497022252774756563579019776738152497176887481485016616321689110379639283894554414714821706751563873042084093931921486485201964663901417388944108942277099796906685936162160107330853989246684752535485813339250639942127632465987057764482446404769920291887013917389898769289311854175933762077209233626790672874166965723428330441845193435751689646245174269602811458763805351253533852878306382689355255449147038896689981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 31c6a4213d9dd457896dfcb4cd987daec2cf5e26 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees-stage3.optum.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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