chp-stage.optumrx.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number fc:71:86:1e:28:be:9b:86:d8:46:eb:c8:b0:b1:32:71 was issued on by COMODO CA Limited.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): fc:71:86:1e:28:be:9b:86:d8:46:eb:c8:b0:b1:32:71
Serial Number (int): 335554904715154830998383797785865564785
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f1:fb:98:a0:50:e3:ce:f8:d4:1a:42:d0:24:d6:d1:cd:a0:8a:02:cd
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 42:c3:e8:ab:32:92:03:e3:5d:2f:1b:71:62:41:46:e8:77:f1:09:6c
Fingerprint (sha256): 02:dd:12:fe:35:ea:f5:0b:99:60:b8:c0:c9:d3:a6:fb:41:a8:b0:75:9d:1a:36:8d:92:fa:1c:aa:43:26:74:3d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate chp-stage.optumrx.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chp-stage.optumrx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chp-stage.optumrx.com
chp-stage-int.optumrx.com
csa.stage.optumrx.com
m.chp-stage.optumrx.com
sso-stage.optumrx.com

Other certificates including the domain name optumrx.com

(limited to 100 certificates)
wem.optumrx.com
wem.uhc.com
client-prod.prescriptionsolutions.com
cert00068-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
chp.optumrx.com
cert00097-azurecdn.akamaized.net
rxbk1qa.rxbuilder.optumrx.com
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
www.optumrx.com
cert00097-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
chp-stage.optumrx.com
cert00093-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
chp-stage.optumrx.com
cert00093-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
chp-stage-int.optumrx.com
chp.optumrx.com
cert00007-azurecdn.akamaized.net
stg-optummarketingcloud.optum.com
cert00047-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
authclients.optumrx.com
wem.uhc.com
mobile-stg.optumrx.com
cert00097-azurecdn.akamaized.net
aem-stg.optumrx.com
cert00068-azurecdn.akamaized.net
aem.optum.com
cert00097-azurecdn.akamaized.net
chp-stage2.optumrx.com
www.optumrx.com
professionals.optumrx.com
cert00084-azurecdn.akamaized.net
chp-stage2.optumrx.com
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
aem.optum.com
cert00093-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
mobilev8-tst1.optumrx.com
stg-optummarketingcloud.optum.com
cert00068-azurecdn.akamaized.net
aem.optum.com
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
www.optumrx.com
cert00007-azurecdn.akamaized.net
chp-prod-new.optumrx.com
chp-stage.optumrx.com
cert00047-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
goldcoast.optumrx.com
aem.optum.com
cert00093-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
stg-optummarketingcloud.optum.com
cert00068-azurecdn.akamaized.net
os-specialty.optumrx.com
iolr.optumrx.com
info.optum.com
rxbk1.rxbuilder.optumrx.com
cert00007-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
client-prod.prescriptionsolutions.com
cert00007-azurecdn.akamaized.net
aem.optum.com
cert00084-azurecdn.akamaized.net

Certificate

The complete raw certificate details for chp-stage.optumrx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqJfYObvRXmXKXQt8vf+
ZaWLCwEnBgkrhLjoq8dHHpZ8WbwdvlZEFFFCLpOoRdLb3oqCYo1KOYJN39wBerGo
t49V1gyD+F7KMkeZlOldh3848exLHa0La3yaSiGPRHWlQ/FqVT0xvyURlbXO6mge
mX83N7hGaUw0jPrjldmabzonBexaCeAcYdPj7JZdz5Y9KPVAWxpVaSvl3+LoYsbB
G3X2yTAZtooZThNgGtKqHG2k0zA+Cf3oxHtomgh++6JwpCY1CV+okGcPW+s3BJuv
hTPiIfBCLHElWIp4zP6NZfn6Gi0j+xOukefzxKBB6xlZrKoMzOPYAqwQAgtYK5rF
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335554904715154830998383797785865564785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chp-stage.optumrx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24065346843189885416059196292967465630943645663562685147113285524015382916017866676977701151154247829227638545416179186705194213477479099288150195663405963025755200635289341287929680879393992075320918240301464416387059918806368892632056457061511593171789646681195519496891824571279118762784152861470368217373607428870039252412233399408220244383583481172836610426867044332181869716454546197948142371733132283896416111161411998945299140240312446684965052807071456407746144439931268225982996735563989941884753615904224758578002601766794047354519705023515604756424957550932311891818907922455845206349229917583778900526341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1fb98a050e3cef8d41a42d024d6d1cda08a02cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp-stage.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp-stage-int.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.stage.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chp-stage.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-stage.optumrx.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008be6aba6080e915c41a73497a013c5466c8ff506f8c7761686cd936cc402cd33f754ec23694caada50cb6946a5b5bbc00684b4810e1cddcfbbd0209ee8d81e1b1a3f227ab2efe6182e05940a72c52141faa94a5992770b7f2416fd64688f7cc29be8d5262a5bd0db438b7b4e86f5b69782ae9cb71c9a351a6b0773ef7c90e3779218132b871f01334ab3fe7eda679d3cbe01d39751e8d74e2749976a5095e4d02a11304ae0a4d406e6a8073adcee95bb8c1c3d67a420c62eb1de499105e48bde34cf0326e2b70048b7b70106f6a6d5755b59be98e8f8abbbc4955b8dc21133058ece918a35ed0a3c945ec1b007cef091886277ff3d973e32d11686bd6f1d5f64