kpa-prod.kaiserpermanente.org

- Kaiser Foundation Health Plan, Inc. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 04:9d:d2:b2:d9:17:3d:19:b5:74:86:34:7a:03:b7:c3 was issued on by Sectigo Limited.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Kaiser Foundation Health Plan, Inc.

Organization: Kaiser Foundation Health Plan, Inc.
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:d2:b2:d9:17:3d:19:b5:74:86:34:7a:03:b7:c3
Serial Number (int): 6136376065745666782817933191901591491
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8a:69:79:5d:7f:9b:3e:08:ae:0d:04:05:06:f0:1d:ce:4c:2a:58:ee
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 83:af:c4:e7:e2:60:79:6e:9f:ff:f7:d5:bb:91:bb:39:61:60:d4:d3
Fingerprint (sha256): 02:d5:49:23:d6:a3:e6:c5:39:f2:21:e3:6f:fa:78:9d:00:9d:e8:b1:db:6c:80:85:16:82:e6:6c:cf:1b:48:d4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate kpa-prod.kaiserpermanente.org

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kpa-prod.kaiserpermanente.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kpa-prod.kaiserpermanente.org
apply-individual-family.kaiserpermanente.org
bcssp.kp.org
ccp.kp.org
coloradolevelfunded.kaiserpermanente.org
coloradolevelfunded.kp.org
f5-bcssp.kp.org
f5-coloradolevelfunded.kp.org
f5-georgialevelfunded.kp.org
georgialevelfunded.kaiserpermanente.org
georgialevelfunded.kp.org
healthexchange-enrollment-offline.kaiserpermanente.org
healthexchange-enrollment-prod.kaiserpermanente.org
healthexchange-enrollment-pview.kaiserpermanente.org
hp-mbr-admn-commercial.kp.org
individual-family-coverageandcosts-offline.kaiserpermanente.org
individual-family-coverageandcosts-prod.kaiserpermanente.org
individual-family-coverageandcosts-pview.kaiserpermanente.org
kp-foundation.kp.org
kpaa.kaiserpermanente.org
kpap.kaiserpermanente.org
kpapa.kaiserpermanente.org
kpapo.kaiserpermanente.org
kpapp.kaiserpermanente.org
kpapw2a1.kp.org
kpapw2a2.kp.org
kpapw2d1.kp.org
kpapw2d2.kp.org
kpapw2d3.kp.org
kpapw2p1.kp.org
kpapw2p2.kp.org
kpapw2p3.kp.org
medicareselfservice-individual.kp.org
offline-apply-individual-family.kaiserpermanente.org
offline-bcssp.kp.org
offline-ccp.kp.org
offline-coloradolevelfunded.kaiserpermanente.org
offline-coloradolevelfunded.kp.org
offline-f5-bcssp.kp.org
offline-f5-coloradolevelfunded.kp.org
offline-f5-georgialevelfunded.kp.org
offline-georgialevelfunded.kaiserpermanente.org
offline-georgialevelfunded.kp.org
offline-hp-mbr-admn.kp.org
offline-kp-foundation.kp.org
offline-medicareselfservice.kp.org
preview-apply-individual-family.kaiserpermanente.org
prod-apply-individual-family.kaiserpermanente.org
prod-hp-mbr-admn.kp.org
prod-medicareselfservice.kp.org
pview-bcssp.kp.org
pview-ccp.kp.org
pview-coloradolevelfunded.kaiserpermanente.org
pview-coloradolevelfunded.kp.org
pview-f5-bcssp.kp.org
pview-f5-coloradolevelfunded.kp.org
pview-f5-georgialevelfunded.kp.org
pview-georgialevelfunded.kaiserpermanente.org
pview-georgialevelfunded.kp.org
pview-hp-mbr-admn.kp.org
pview-kp-foundation.kp.org
pview-medicareselfservice.kp.org

Other certificates including the domain name kaiserpermanente.org

(limited to 100 certificates)
national-implantregistries.kaiserpermanente.org
researchdatacollect-test.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
www.scalclinicalops.kaiserpermanente.org
wa-producer.kaiserpermanente.org
lookinside.kaiserpermanente.org
healthtrac.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
insider.kaiserpermanente.org
lookinside.kaiserpermanente.org
smu.kaiserpermanente.org
ss021.kaiserpermanente.org
neuroptresidency.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
virtualconnect.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
kpwit.kaiserpermanente.org
wa-clinician-dev.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
kpa-prod.kaiserpermanente.org
earlystart.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
fsso-ebiz.kaiserpermanente.org
academic.gsm.cornell.edu
insidekpncal.kaiserpermanente.org
mapri.kaiserpermanente.org
san-9-s7.tlsprovisioning.exacttarget.com
healthplans.kaiserpermanente.org
api.kaiserpermanente.org
earlystart.kaiserpermanente.org
divisionofresearchapp.kaiserpermanente.org
etpgeorgia.kaiserpermanente.org
hearingcenterhawaii.kaiserpermanente.org
kphealthconnectnews.kaiserpermanente.org
academic.gsm.cornell.edu
volunteer-ncal.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
northwest-hospitals.kaiserpermanente.org
apply-individual-family-dev-p01.appl.kaiserpermanente.org
somtitleix.kaiserpermanente.org
lookinside.kaiserpermanente.org
general-agencies-california.kaiserpermanente.org
fortherecord.kaiserpermanente.org
physiciancareers.kaiserpermanente.org
onelinkinfo.kaiserpermanente.org
insidecmi.kaiserpermanente.org
researchbank.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
renewmyplan-colorado.kaiserpermanente.org
mapri.kaiserpermanente.org
www.scal-gem.kaiserpermanente.org
rws.ns-cmd-nlp-dv.k8s.cmd.tpmg.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
fs10.kaiserpermanente.org
kpmatters-scal.kaiserpermanente.org
tro.kaiserpermanente.org
wa-momentum.kaiserpermanente.org
wa-member2.kaiserpermanente.org
equityinclusionanddiversity.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
scholarsacademy.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
insidecmi.kaiserpermanente.org
stage2.newsmedia.kaiserpermanente.org
quality-patient-safety.kaiserpermanente.org
volunteer-ncal.kaiserpermanente.org
fs050.kaiserpermanente.org
qa-staging.cmd.kaiserpermanente.org
testmy.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
individual-family-pp.kaiserpermanente.org
fd-ebiz.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
KAISER PERMANENTE
bariatric-northerncalifornia.kaiserpermanente.org
dev10.kaiserpermanente.org
divisionofresearch.kaiserpermanente.org
lookinside.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
bariatric-northerncalifornia.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
fs010.kaiserpermanente.org
rt1.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
kpwit.kaiserpermanente.org
tpmgawards.kaiserpermanente.org
cancercare.kaiserpermanente.org
midatlanticapplicationtool.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
community.kp.org
lifecareplan.kp.org
community.kaiserpermanente.org
*.sanssl-013.bsdtools.com

Certificate

The complete raw certificate details for kpa-prod.kaiserpermanente.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQkNX+mWdWGDtUaVEjq
7or+KpX4cQ1oZ9myZEMGAdhRq4RVUaBLO3iuNeyRP7kF1I2kis7mlKpeYgIvHrrc
HH0wJTu5B7EbRWKqoUHKztx8z0t82Coy0vVkoUgC23LOOAkrfRYbCcHsIWwQWsQ4
9Bwws4TA4HSZOSsT9V2bW/dqhML5HnstXajX5BWDprwpbCPSLSNZ39VyuxjVTZYJ
5tcoVv/SehGzvS4sznPw8J/SmCgwf8iIuF8MAZMRu8oEZf4JD6O0bo40S4XOQhXQ
fLZoPE1adHNOMABaEYz/13sjXYnTU13EtZePEmuwzUBg1kGb2UvIAIU0WbFOVvvt
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6136376065745666782817933191901591491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser Foundation Health Plan, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kpa-prod.kaiserpermanente.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24081998893107327887212290963306145012596241786707742606144670603146165250024045049989864254584058175479989623478120063912941848646003048643063892840900549116671628747556820114789801139980812094868346545543952771996295553305889851222759002841801402462945390435341896415050814623749695191655067063881456370843053781845514155539739802914231859749859804988031558014695495098297337835777259060780146235299265310373973347241475637244467261369590671446106867166988295321261429383641025403753380686113106310314683890645995974161135025529251141761608798979841891828814727271420061468113249745956066840468620065250641505414503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a69795d7f9b3e08ae0d040506f01dce4c2a58ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2051 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpa-prod.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply-individual-family.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradolevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgialevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-offline.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-prod.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthexchange-enrollment-pview.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp-mbr-admn-commercial.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-offline.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-prod.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual-family-coverageandcosts-pview.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp-foundation.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpaa.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpap.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapa.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapo.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapp.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2a1.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2a2.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d1.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d2.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2d3.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p1.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p2.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpapw2p3.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicareselfservice-individual.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-apply-individual-family.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-ccp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-coloradolevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-f5-georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-georgialevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-hp-mbr-admn.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-kp-foundation.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline-medicareselfservice.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-apply-individual-family.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-apply-individual-family.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-hp-mbr-admn.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-medicareselfservice.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-ccp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-coloradolevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-bcssp.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-coloradolevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-f5-georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-georgialevelfunded.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-georgialevelfunded.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-hp-mbr-admn.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-kp-foundation.kp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pview-medicareselfservice.kp.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062adea8710133e1395628b6d4fcb7e5998ad9ea317cfdc64a05c9cc4043445deea227d034aa3adfbd94de514a367ae696ae8663a5956e7b72f2a5e9f5e926ca4c12bf828ee996eb561fc2d396e55ba8ba8671586ad0e6fb1105f31e0f41a43b4d2d147cda13fa61409608868693fd30ef7b392af5141aca8ab8c854c0cf00d60803a089719df02690f07981d84824840cddb83c85566d4519828d3f3384931d56cc160264c7e1bbf1a1291a35a2cef1c22184a13ad53f3b93461afe895aa7d68f4ba13dc11d14252e3a2581e3126d13d9237706b3885cd3232e16c3b8b1a8f89d685c73c510616e82f4e092087f8394e635acede171ee0b397fb8b08c440eed8