ie-appsvc-dmz.optum.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ce:34:88:97:3c:3a:d8:14:ef:1d:29:ac:8e:a5:ed:50 was issued on by COMODO CA Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Optum Tech ETP & Info Srvcs
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ce:34:88:97:3c:3a:d8:14:ef:1d:29:ac:8e:a5:ed:50
Serial Number (int): 274093736958135355840103981181852577104
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 52:c3:6b:70:9c:ff:d6:b4:0a:7a:f6:6f:12:f4:bb:65:c0:30:92:3e
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 6e:ac:f6:94:30:16:93:51:3e:16:cb:18:b8:cc:94:9d:b6:e3:a4:c6
Fingerprint (sha256): 02:d4:c0:a9:a8:e9:86:48:bc:99:5d:11:91:6b:0b:15:b7:2b:e8:17:2e:8d:2b:25:5c:26:29:52:0a:31:3e:ba

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ie-appsvc-dmz.optum.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ie-appsvc-dmz.optum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ie-appsvc-dmz.optum.com
adm-dev1.ie.optum.com
adm-dev2.ie.optum.com
adm-tst1.ie.optum.com
adm-tst2.ie.optum.com
ie-mnportal-dev1.optum.com
ie-mnportal-tst1.optum.com
ie-odm-dc-dev1.optum.com
ie-wvportal-dev1.optum.com
ie-wvportal-tst1.optum.com

Other certificates including the domain name optum.com

(limited to 100 certificates)
rxanalytics.optum.com
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
service-now-auth-stage.optum.com
sps-stage.optum.com
reco-a1507b3a.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
stg-etg.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
reco-0c3ffee1.optum.com
ols-tableau-azure-e2-tst.optum.com
prdirx-rxview.optum.com
reco-2d6c8103.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
reco-f966bf9d.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
reco-a0f5ea66.optum.com
demo-oidc.stepwise.optum.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
reco-2d6c8103.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
hive.hcp.uhg.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net
fs2-stagedmz-ose3.optum.com
cert00047-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
caseman-bfx.optum.com
api.bahubali.cdml-dev.optum.com
dashboard-api.edan.cdml-dev.optum.com
cert00007-azurecdn.akamaized.net
edi-276clmstsinq-alpha1.optum.com
cm.optum.com
ie-mn-cp-demo.optum.com

Certificate

The complete raw certificate details for ie-appsvc-dmz.optum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy5m2jRhyLVgHDmWEkrG
IVMfOtq9UnDn1fbpkjVMgfY54Fj3XY2uZuIoBbC9A3/UvwvMEK8EBNWp7WOU2lM4
xKS2GOER8SjmEk8kp8cSE1ghSp2wmGhWGvv9ULadALoNPaL3Be6tlP1xBZrF6GA+
O3tpp+RHeq+X4+4celkmjOSzWbZXhqiJnxoPf6IrD1nW+jNO0wCbT/m6WwXMpwuy
XsygIQdgitvPwHBQR7swiPgid7XJlGUNmrZwOXTzILSzlNEB001uE7tjwH7ZbqOB
6huZfIcVwj74VqAG04xSVqDX4hkDnILx1PHeWCnb6pnhjgYCsLCiUkrxV0vowEqw
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274093736958135355840103981181852577104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Optum Tech ETP & Info Srvcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ie-appsvc-dmz.optum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18074959174280505492332184223024899967815893399930638163247100127530599434282234099127898274968739052708443466198775504185153690354040897793559801321262226880264225781901091809112902330069072795426768212904934684906417402981678998114406360364677076708236334482021170865811372371286457805067737067135946613244298881780932144424067089875533499377221970580490595371160140393820995389962051918897891686566701938232751130819647252013379071461920191380721862043757421165683740034067663010597620735868352362650161124938155125966966580392159200775465653811189484292697477040346981847400294156856667379282305440050577765216421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52c36b709cffd6b40a7af66f12f4bb65c030923e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-appsvc-dmz.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm-dev1.ie.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm-dev2.ie.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm-tst1.ie.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm-tst2.ie.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-mnportal-dev1.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-mnportal-tst1.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-odm-dc-dev1.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-wvportal-dev1.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-wvportal-tst1.optum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001651b5601f80000040300483046022100a572b6573e688fbc2d68b2a4f6009ee01c3ae1b073e73f9e5d3bca58d2b1ae4d022100fb05e3f3a7ad3d0a35109812b086b230d224e239662e5cba4f89542da334a22d007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001651b56028a000004030047304502200642717b75e0985e118b8ce702a6787cf1879a54a6a2f31dd19f1d06357e9c93022100e77cb7622456e66f874e1c571ab5a338ee62c81ed30245b9343a5630dc327afa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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