kpa-prod.kaiserpermanente.org
- Kaiser Foundation Health Plan, Inc. -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 04:9d:d2:b2:d9:17:3d:19:b5:74:86:34:7a:03:b7:c3 was issued on by Sectigo Limited.
With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Kaiser Foundation Health Plan, Inc.
Organization:
Kaiser Foundation Health Plan, Inc.
State / Province:
California
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 04:9d:d2:b2:d9:17:3d:19:b5:74:86:34:7a:03:b7:c3Serial Number (int): 6136376065745666782817933191901591491
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8a:69:79:5d:7f:9b:3e:08:ae:0d:04:05:06:f0:1d:ce:4c:2a:58:ee
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 83:af:c4:e7:e2:60:79:6e:9f:ff:f7:d5:bb:91:bb:39:61:60:d4:d3
Fingerprint (sha256): 02:d5:49:23:d6:a3:e6:c5:39:f2:21:e3:6f:fa:78:9d:00:9d:e8:b1:db:6c:80:85:16:82:e6:6c:cf:1b:48:d4
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate kpa-prod.kaiserpermanente.org
62
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kpa-prod.kaiserpermanente.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kpa-prod.kaiserpermanente.org
apply-individual-family.kaiserpermanente.org
bcssp.kp.org
ccp.kp.org
coloradolevelfunded.kaiserpermanente.org
coloradolevelfunded.kp.org
f5-bcssp.kp.org
f5-coloradolevelfunded.kp.org
f5-georgialevelfunded.kp.org
georgialevelfunded.kaiserpermanente.org
georgialevelfunded.kp.org
healthexchange-enrollment-offline.kaiserpermanente.org
healthexchange-enrollment-prod.kaiserpermanente.org
healthexchange-enrollment-pview.kaiserpermanente.org
hp-mbr-admn-commercial.kp.org
individual-family-coverageandcosts-offline.kaiserpermanente.org
individual-family-coverageandcosts-prod.kaiserpermanente.org
individual-family-coverageandcosts-pview.kaiserpermanente.org
kp-foundation.kp.org
kpaa.kaiserpermanente.org
kpap.kaiserpermanente.org
kpapa.kaiserpermanente.org
kpapo.kaiserpermanente.org
kpapp.kaiserpermanente.org
kpapw2a1.kp.org
kpapw2a2.kp.org
kpapw2d1.kp.org
kpapw2d2.kp.org
kpapw2d3.kp.org
kpapw2p1.kp.org
kpapw2p2.kp.org
kpapw2p3.kp.org
medicareselfservice-individual.kp.org
offline-apply-individual-family.kaiserpermanente.org
offline-bcssp.kp.org
offline-ccp.kp.org
offline-coloradolevelfunded.kaiserpermanente.org
offline-coloradolevelfunded.kp.org
offline-f5-bcssp.kp.org
offline-f5-coloradolevelfunded.kp.org
offline-f5-georgialevelfunded.kp.org
offline-georgialevelfunded.kaiserpermanente.org
offline-georgialevelfunded.kp.org
offline-hp-mbr-admn.kp.org
offline-kp-foundation.kp.org
offline-medicareselfservice.kp.org
preview-apply-individual-family.kaiserpermanente.org
prod-apply-individual-family.kaiserpermanente.org
prod-hp-mbr-admn.kp.org
prod-medicareselfservice.kp.org
pview-bcssp.kp.org
pview-ccp.kp.org
pview-coloradolevelfunded.kaiserpermanente.org
pview-coloradolevelfunded.kp.org
pview-f5-bcssp.kp.org
pview-f5-coloradolevelfunded.kp.org
pview-f5-georgialevelfunded.kp.org
pview-georgialevelfunded.kaiserpermanente.org
pview-georgialevelfunded.kp.org
pview-hp-mbr-admn.kp.org
pview-kp-foundation.kp.org
pview-medicareselfservice.kp.org
apply-individual-family.kaiserpermanente.org
bcssp.kp.org
ccp.kp.org
coloradolevelfunded.kaiserpermanente.org
coloradolevelfunded.kp.org
f5-bcssp.kp.org
f5-coloradolevelfunded.kp.org
f5-georgialevelfunded.kp.org
georgialevelfunded.kaiserpermanente.org
georgialevelfunded.kp.org
healthexchange-enrollment-offline.kaiserpermanente.org
healthexchange-enrollment-prod.kaiserpermanente.org
healthexchange-enrollment-pview.kaiserpermanente.org
hp-mbr-admn-commercial.kp.org
individual-family-coverageandcosts-offline.kaiserpermanente.org
individual-family-coverageandcosts-prod.kaiserpermanente.org
individual-family-coverageandcosts-pview.kaiserpermanente.org
kp-foundation.kp.org
kpaa.kaiserpermanente.org
kpap.kaiserpermanente.org
kpapa.kaiserpermanente.org
kpapo.kaiserpermanente.org
kpapp.kaiserpermanente.org
kpapw2a1.kp.org
kpapw2a2.kp.org
kpapw2d1.kp.org
kpapw2d2.kp.org
kpapw2d3.kp.org
kpapw2p1.kp.org
kpapw2p2.kp.org
kpapw2p3.kp.org
medicareselfservice-individual.kp.org
offline-apply-individual-family.kaiserpermanente.org
offline-bcssp.kp.org
offline-ccp.kp.org
offline-coloradolevelfunded.kaiserpermanente.org
offline-coloradolevelfunded.kp.org
offline-f5-bcssp.kp.org
offline-f5-coloradolevelfunded.kp.org
offline-f5-georgialevelfunded.kp.org
offline-georgialevelfunded.kaiserpermanente.org
offline-georgialevelfunded.kp.org
offline-hp-mbr-admn.kp.org
offline-kp-foundation.kp.org
offline-medicareselfservice.kp.org
preview-apply-individual-family.kaiserpermanente.org
prod-apply-individual-family.kaiserpermanente.org
prod-hp-mbr-admn.kp.org
prod-medicareselfservice.kp.org
pview-bcssp.kp.org
pview-ccp.kp.org
pview-coloradolevelfunded.kaiserpermanente.org
pview-coloradolevelfunded.kp.org
pview-f5-bcssp.kp.org
pview-f5-coloradolevelfunded.kp.org
pview-f5-georgialevelfunded.kp.org
pview-georgialevelfunded.kaiserpermanente.org
pview-georgialevelfunded.kp.org
pview-hp-mbr-admn.kp.org
pview-kp-foundation.kp.org
pview-medicareselfservice.kp.org
Other certificates including the domain name kaiserpermanente.org
(limited to 100 certificates)
national-implantregistries.kaiserpermanente.org
researchdatacollect-test.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
www.scalclinicalops.kaiserpermanente.org
wa-producer.kaiserpermanente.org
lookinside.kaiserpermanente.org
healthtrac.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
insider.kaiserpermanente.org
lookinside.kaiserpermanente.org
smu.kaiserpermanente.org
ss021.kaiserpermanente.org
neuroptresidency.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
virtualconnect.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
kpwit.kaiserpermanente.org
wa-clinician-dev.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
kpa-prod.kaiserpermanente.org
earlystart.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
fsso-ebiz.kaiserpermanente.org
academic.gsm.cornell.edu
insidekpncal.kaiserpermanente.org
mapri.kaiserpermanente.org
san-9-s7.tlsprovisioning.exacttarget.com
healthplans.kaiserpermanente.org
api.kaiserpermanente.org
earlystart.kaiserpermanente.org
divisionofresearchapp.kaiserpermanente.org
etpgeorgia.kaiserpermanente.org
hearingcenterhawaii.kaiserpermanente.org
kphealthconnectnews.kaiserpermanente.org
academic.gsm.cornell.edu
volunteer-ncal.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
northwest-hospitals.kaiserpermanente.org
apply-individual-family-dev-p01.appl.kaiserpermanente.org
somtitleix.kaiserpermanente.org
lookinside.kaiserpermanente.org
general-agencies-california.kaiserpermanente.org
fortherecord.kaiserpermanente.org
physiciancareers.kaiserpermanente.org
onelinkinfo.kaiserpermanente.org
insidecmi.kaiserpermanente.org
researchbank.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
renewmyplan-colorado.kaiserpermanente.org
mapri.kaiserpermanente.org
www.scal-gem.kaiserpermanente.org
rws.ns-cmd-nlp-dv.k8s.cmd.tpmg.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
fs10.kaiserpermanente.org
kpmatters-scal.kaiserpermanente.org
tro.kaiserpermanente.org
wa-momentum.kaiserpermanente.org
wa-member2.kaiserpermanente.org
equityinclusionanddiversity.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
scholarsacademy.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
insidecmi.kaiserpermanente.org
stage2.newsmedia.kaiserpermanente.org
quality-patient-safety.kaiserpermanente.org
volunteer-ncal.kaiserpermanente.org
fs050.kaiserpermanente.org
qa-staging.cmd.kaiserpermanente.org
testmy.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
individual-family-pp.kaiserpermanente.org
fd-ebiz.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
KAISER PERMANENTE
bariatric-northerncalifornia.kaiserpermanente.org
dev10.kaiserpermanente.org
divisionofresearch.kaiserpermanente.org
lookinside.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
bariatric-northerncalifornia.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
fs010.kaiserpermanente.org
rt1.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
kpwit.kaiserpermanente.org
tpmgawards.kaiserpermanente.org
cancercare.kaiserpermanente.org
midatlanticapplicationtool.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
community.kp.org
lifecareplan.kp.org
community.kaiserpermanente.org
*.sanssl-013.bsdtools.com
researchdatacollect-test.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
www.scalclinicalops.kaiserpermanente.org
wa-producer.kaiserpermanente.org
lookinside.kaiserpermanente.org
healthtrac.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
insider.kaiserpermanente.org
lookinside.kaiserpermanente.org
smu.kaiserpermanente.org
ss021.kaiserpermanente.org
neuroptresidency.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
virtualconnect.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
kpwit.kaiserpermanente.org
wa-clinician-dev.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
kpa-prod.kaiserpermanente.org
earlystart.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
fsso-ebiz.kaiserpermanente.org
academic.gsm.cornell.edu
insidekpncal.kaiserpermanente.org
mapri.kaiserpermanente.org
san-9-s7.tlsprovisioning.exacttarget.com
healthplans.kaiserpermanente.org
api.kaiserpermanente.org
earlystart.kaiserpermanente.org
divisionofresearchapp.kaiserpermanente.org
etpgeorgia.kaiserpermanente.org
hearingcenterhawaii.kaiserpermanente.org
kphealthconnectnews.kaiserpermanente.org
academic.gsm.cornell.edu
volunteer-ncal.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
northwest-hospitals.kaiserpermanente.org
apply-individual-family-dev-p01.appl.kaiserpermanente.org
somtitleix.kaiserpermanente.org
lookinside.kaiserpermanente.org
general-agencies-california.kaiserpermanente.org
fortherecord.kaiserpermanente.org
physiciancareers.kaiserpermanente.org
onelinkinfo.kaiserpermanente.org
insidecmi.kaiserpermanente.org
researchbank.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
renewmyplan-colorado.kaiserpermanente.org
mapri.kaiserpermanente.org
www.scal-gem.kaiserpermanente.org
rws.ns-cmd-nlp-dv.k8s.cmd.tpmg.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
fs10.kaiserpermanente.org
kpmatters-scal.kaiserpermanente.org
tro.kaiserpermanente.org
wa-momentum.kaiserpermanente.org
wa-member2.kaiserpermanente.org
equityinclusionanddiversity.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
scholarsacademy.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
insidecmi.kaiserpermanente.org
stage2.newsmedia.kaiserpermanente.org
quality-patient-safety.kaiserpermanente.org
volunteer-ncal.kaiserpermanente.org
fs050.kaiserpermanente.org
qa-staging.cmd.kaiserpermanente.org
testmy.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
individual-family-pp.kaiserpermanente.org
fd-ebiz.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
KAISER PERMANENTE
bariatric-northerncalifornia.kaiserpermanente.org
dev10.kaiserpermanente.org
divisionofresearch.kaiserpermanente.org
lookinside.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
bariatric-northerncalifornia.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
fs010.kaiserpermanente.org
rt1.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
kpwit.kaiserpermanente.org
tpmgawards.kaiserpermanente.org
cancercare.kaiserpermanente.org
midatlanticapplicationtool.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
community.kp.org
lifecareplan.kp.org
community.kaiserpermanente.org
*.sanssl-013.bsdtools.com
Certificate
The complete raw certificate details for kpa-prod.kaiserpermanente.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIO4zCCDcugAwIBAgIQBJ3SstkXPRm1dIY0egO3wzANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIzMTEyNzAwMDAwMFoXDTI0MTIyNjIzNTk1OVoweDELMAkGA1UE BhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExLDAqBgNVBAoTI0thaXNlciBGb3Vu ZGF0aW9uIEhlYWx0aCBQbGFuLCBJbmMuMSYwJAYDVQQDEx1rcGEtcHJvZC5rYWlz ZXJwZXJtYW5lbnRlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL7EJDV/plnVhg7VGlRI6u6K/iqV+HENaGfZsmRDBgHYUauEVVGgSzt4rjXskT+5 BdSNpIrO5pSqXmICLx663Bx9MCU7uQexG0ViqqFBys7cfM9LfNgqMtL1ZKFIAtty zjgJK30WGwnB7CFsEFrEOPQcMLOEwOB0mTkrE/Vdm1v3aoTC+R57LV2o1+QVg6a8 KWwj0i0jWd/VcrsY1U2WCebXKFb/0noRs70uLM5z8PCf0pgoMH/IiLhfDAGTEbvK BGX+CQ+jtG6ONEuFzkIV0Hy2aDxNWnRzTjAAWhGM/9d7I12J01NdxLWXjxJrsM1A YNZBm9lLyACFNFmxTlb77WcCAwEAAaOCC0kwggtFMB8GA1UdIwQYMBaAFBfZ1iUn Z/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBSKaXldf5s+CK4NBAUG8B3OTCpY7jAO BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEF BQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRT MFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2Fu aXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEB BH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdv UlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggr BgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQC BIIBbwSCAWsBaQB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB jBKeHVUAAAQDAEYwRAIgEoYOdC9odcjjIvBAodzJ7kPOf62O3ILe4wE3oo1ZZo0C ICqr+fQ3JXh5KwoA5Nih0VkQRmiY+6nu3QRRlV1T10+dAHcAPxdLT9ciR1iUHWUc hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMEp4fMwAABAMASDBGAiEA8qAjLjVD/nfm Fsax/iGfSwpbOsgjYInepwlXbHI6CL0CIQDMp+HM+WrgdFYyy08LbLz9V5RTwTjb TFIgpJOPE1JYRAB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB jBKeHYMAAAQDAEgwRgIhAJj0skACFXPfNC7spt3PfhZ4CbwDimv59HSLLrvcow5q AiEA+1GOO8ZsaUWDnOBlehKWlt2nblcP9fKZu6zjKSZKUm0wgggMBgNVHREEgggD MIIH/4Ida3BhLXByb2Qua2Fpc2VycGVybWFuZW50ZS5vcmeCLGFwcGx5LWluZGl2 aWR1YWwtZmFtaWx5LmthaXNlcnBlcm1hbmVudGUub3JnggxiY3NzcC5rcC5vcmeC CmNjcC5rcC5vcmeCKGNvbG9yYWRvbGV2ZWxmdW5kZWQua2Fpc2VycGVybWFuZW50 ZS5vcmeCGmNvbG9yYWRvbGV2ZWxmdW5kZWQua3Aub3Jngg9mNS1iY3NzcC5rcC5v cmeCHWY1LWNvbG9yYWRvbGV2ZWxmdW5kZWQua3Aub3JnghxmNS1nZW9yZ2lhbGV2 ZWxmdW5kZWQua3Aub3JngidnZW9yZ2lhbGV2ZWxmdW5kZWQua2Fpc2VycGVybWFu ZW50ZS5vcmeCGWdlb3JnaWFsZXZlbGZ1bmRlZC5rcC5vcmeCNmhlYWx0aGV4Y2hh bmdlLWVucm9sbG1lbnQtb2ZmbGluZS5rYWlzZXJwZXJtYW5lbnRlLm9yZ4IzaGVh bHRoZXhjaGFuZ2UtZW5yb2xsbWVudC1wcm9kLmthaXNlcnBlcm1hbmVudGUub3Jn gjRoZWFsdGhleGNoYW5nZS1lbnJvbGxtZW50LXB2aWV3LmthaXNlcnBlcm1hbmVu dGUub3Jngh1ocC1tYnItYWRtbi1jb21tZXJjaWFsLmtwLm9yZ4I/aW5kaXZpZHVh bC1mYW1pbHktY292ZXJhZ2VhbmRjb3N0cy1vZmZsaW5lLmthaXNlcnBlcm1hbmVu dGUub3JngjxpbmRpdmlkdWFsLWZhbWlseS1jb3ZlcmFnZWFuZGNvc3RzLXByb2Qu a2Fpc2VycGVybWFuZW50ZS5vcmeCPWluZGl2aWR1YWwtZmFtaWx5LWNvdmVyYWdl YW5kY29zdHMtcHZpZXcua2Fpc2VycGVybWFuZW50ZS5vcmeCFGtwLWZvdW5kYXRp b24ua3Aub3JnghlrcGFhLmthaXNlcnBlcm1hbmVudGUub3JnghlrcGFwLmthaXNl cnBlcm1hbmVudGUub3JnghprcGFwYS5rYWlzZXJwZXJtYW5lbnRlLm9yZ4Iaa3Bh cG8ua2Fpc2VycGVybWFuZW50ZS5vcmeCGmtwYXBwLmthaXNlcnBlcm1hbmVudGUu b3Jngg9rcGFwdzJhMS5rcC5vcmeCD2twYXB3MmEyLmtwLm9yZ4IPa3BhcHcyZDEu a3Aub3Jngg9rcGFwdzJkMi5rcC5vcmeCD2twYXB3MmQzLmtwLm9yZ4IPa3BhcHcy cDEua3Aub3Jngg9rcGFwdzJwMi5rcC5vcmeCD2twYXB3MnAzLmtwLm9yZ4IlbWVk aWNhcmVzZWxmc2VydmljZS1pbmRpdmlkdWFsLmtwLm9yZ4I0b2ZmbGluZS1hcHBs eS1pbmRpdmlkdWFsLWZhbWlseS5rYWlzZXJwZXJtYW5lbnRlLm9yZ4IUb2ZmbGlu ZS1iY3NzcC5rcC5vcmeCEm9mZmxpbmUtY2NwLmtwLm9yZ4Iwb2ZmbGluZS1jb2xv cmFkb2xldmVsZnVuZGVkLmthaXNlcnBlcm1hbmVudGUub3JngiJvZmZsaW5lLWNv bG9yYWRvbGV2ZWxmdW5kZWQua3Aub3JnghdvZmZsaW5lLWY1LWJjc3NwLmtwLm9y Z4Ilb2ZmbGluZS1mNS1jb2xvcmFkb2xldmVsZnVuZGVkLmtwLm9yZ4Ikb2ZmbGlu ZS1mNS1nZW9yZ2lhbGV2ZWxmdW5kZWQua3Aub3Jngi9vZmZsaW5lLWdlb3JnaWFs ZXZlbGZ1bmRlZC5rYWlzZXJwZXJtYW5lbnRlLm9yZ4Ihb2ZmbGluZS1nZW9yZ2lh bGV2ZWxmdW5kZWQua3Aub3JnghpvZmZsaW5lLWhwLW1ici1hZG1uLmtwLm9yZ4Ic b2ZmbGluZS1rcC1mb3VuZGF0aW9uLmtwLm9yZ4Iib2ZmbGluZS1tZWRpY2FyZXNl bGZzZXJ2aWNlLmtwLm9yZ4I0cHJldmlldy1hcHBseS1pbmRpdmlkdWFsLWZhbWls eS5rYWlzZXJwZXJtYW5lbnRlLm9yZ4IxcHJvZC1hcHBseS1pbmRpdmlkdWFsLWZh bWlseS5rYWlzZXJwZXJtYW5lbnRlLm9yZ4IXcHJvZC1ocC1tYnItYWRtbi5rcC5v cmeCH3Byb2QtbWVkaWNhcmVzZWxmc2VydmljZS5rcC5vcmeCEnB2aWV3LWJjc3Nw LmtwLm9yZ4IQcHZpZXctY2NwLmtwLm9yZ4IucHZpZXctY29sb3JhZG9sZXZlbGZ1 bmRlZC5rYWlzZXJwZXJtYW5lbnRlLm9yZ4IgcHZpZXctY29sb3JhZG9sZXZlbGZ1 bmRlZC5rcC5vcmeCFXB2aWV3LWY1LWJjc3NwLmtwLm9yZ4IjcHZpZXctZjUtY29s b3JhZG9sZXZlbGZ1bmRlZC5rcC5vcmeCInB2aWV3LWY1LWdlb3JnaWFsZXZlbGZ1 bmRlZC5rcC5vcmeCLXB2aWV3LWdlb3JnaWFsZXZlbGZ1bmRlZC5rYWlzZXJwZXJt YW5lbnRlLm9yZ4IfcHZpZXctZ2VvcmdpYWxldmVsZnVuZGVkLmtwLm9yZ4IYcHZp ZXctaHAtbWJyLWFkbW4ua3Aub3Jnghpwdmlldy1rcC1mb3VuZGF0aW9uLmtwLm9y Z4IgcHZpZXctbWVkaWNhcmVzZWxmc2VydmljZS5rcC5vcmcwDQYJKoZIhvcNAQEL BQADggEBAGKt6ocQEz4TlWKLbU/LflmYrZ6jF8/cZKBcnMQENEXe6iJ9A0qjrfvZ TeUUo2euaWroZjpZVue3Lypen16SbKTBK/go7plutWH8LTluVbqLqGcVhq0Ob7EQ XzHg9BpDtNLRR82hP6YUCWCIaGk/0w73s5KvUUGsqKuMhUwM8A1ggDoIlxnfAmkP B5gdhIJIQM3bg8hVZtRRmCjT8zhJMdVswWAmTH4bvxoSkaNaLO8cIhhKE61T87k0 Ya/olap9aPS6E9wR0UJS46JYHjEm0T2SN3BrOIXNMjLhbDuLGo+J1oXHPFEGFugv Tgkgh/g5TmNazt4XHuCzl/uLCMRA7tg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQkNX+mWdWGDtUaVEjq 7or+KpX4cQ1oZ9myZEMGAdhRq4RVUaBLO3iuNeyRP7kF1I2kis7mlKpeYgIvHrrc HH0wJTu5B7EbRWKqoUHKztx8z0t82Coy0vVkoUgC23LOOAkrfRYbCcHsIWwQWsQ4 9Bwws4TA4HSZOSsT9V2bW/dqhML5HnstXajX5BWDprwpbCPSLSNZ39VyuxjVTZYJ 5tcoVv/SehGzvS4sznPw8J/SmCgwf8iIuF8MAZMRu8oEZf4JD6O0bo40S4XOQhXQ fLZoPE1adHNOMABaEYz/13sjXYnTU13EtZePEmuwzUBg1kGb2UvIAIU0WbFOVvvt ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6136376065745666782817933191901591491 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser Foundation Health Plan, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kpa-prod.kaiserpermanente.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24081998893107327887212290963306145012596241786707742606144670603146165250024045049989864254584058175479989623478120063912941848646003048643063892840900549116671628747556820114789801139980812094868346545543952771996295553305889851222759002841801402462945390435341896415050814623749695191655067063881456370843053781845514155539739802914231859749859804988031558014695495098297337835777259060780146235299265310373973347241475637244467261369590671446106867166988295321261429383641025403753380686113106310314683890645995974161135025529251141761608798979841891828814727271420061468113249745956066840468620065250641505414503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a69795d7f9b3e08ae0d040506f01dce4c2a58ee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2051 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpa-prod.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply-individual-family.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradolevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgialevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-offline.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-prod.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-pview.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp-mbr-admn-commercial.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-offline.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-prod.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-pview.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp-foundation.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpaa.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpap.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapa.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapo.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapp.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2a1.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2a2.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d1.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d2.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d3.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p1.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p2.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p3.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicareselfservice-individual.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-apply-individual-family.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-ccp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-coloradolevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-georgialevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-hp-mbr-admn.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-kp-foundation.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-medicareselfservice.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-apply-individual-family.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-apply-individual-family.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-hp-mbr-admn.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-medicareselfservice.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-ccp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-coloradolevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-bcssp.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-coloradolevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-georgialevelfunded.kaiserpermanente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-georgialevelfunded.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-hp-mbr-admn.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-kp-foundation.kp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-medicareselfservice.kp.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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