ks1.optum.com
- UnitedHealth Group Inc. -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number f5:88:e5:c9:39:14:05:78:fc:f6:b5:91:f9:16:6a:f5 was issued on by COMODO CA Limited.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
UnitedHealth Group Inc.
Organization:
UnitedHealth Group Inc.
Organization unit: Optum Tech ETP & Info Srvcs
Organization unit: Multi-Domain SSL
Organization unit: Optum Tech ETP & Info Srvcs
Organization unit: Multi-Domain SSL
Address:
9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): f5:88:e5:c9:39:14:05:78:fc:f6:b5:91:f9:16:6a:f5Serial Number (int): 326371671954389876938450438366898318069
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e4:5e:fc:f1:f8:6c:df:94:7a:dd:f3:d9:cf:25:5b:73:e4:e9:75:0b
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): 9d:0c:8e:4d:cd:e6:f2:77:22:76:a6:87:ca:8d:1f:7f:6f:ff:27:f2
Fingerprint (sha256): 02:e0:00:53:d6:59:5d:3e:86:77:eb:ca:46:65:51:a0:eb:85:0b:f4:69:62:26:67:09:8f:10:97:27:11:d4:aa
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate ks1.optum.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ks1.optum.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ks1.optum.com
Other certificates including the domain name optum.com
(limited to 100 certificates)
rxanalytics.optum.com
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
service-now-auth-stage.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
stg-etg.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
prdirx-rxview.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
demo-oidc.stepwise.optum.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net
fs2-stagedmz-ose3.optum.com
cert00047-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
caseman-bfx.optum.com
api.bahubali.cdml-dev.optum.com
dashboard-api.edan.cdml-dev.optum.com
cert00007-azurecdn.akamaized.net
edi-276clmstsinq-alpha1.optum.com
cm.optum.com
ie-mn-cp-demo.optum.com
devbase.optum.com
ie-appsvc-dmz.optum.com
store.optum.com
stg-nyapd-int.optum.com
ks1.optum.com
reskinstage-o360.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
service-now-auth-stage.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
stg-etg.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
prdirx-rxview.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
demo-oidc.stepwise.optum.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net
fs2-stagedmz-ose3.optum.com
cert00047-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
caseman-bfx.optum.com
api.bahubali.cdml-dev.optum.com
dashboard-api.edan.cdml-dev.optum.com
cert00007-azurecdn.akamaized.net
edi-276clmstsinq-alpha1.optum.com
cm.optum.com
ie-mn-cp-demo.optum.com
devbase.optum.com
ie-appsvc-dmz.optum.com
store.optum.com
stg-nyapd-int.optum.com
ks1.optum.com
reskinstage-o360.optum.com
sps-stage.optum.com
cert00047-azurecdn.akamaized.net
Certificate
The complete raw certificate details for ks1.optum.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIRAPWI5ck5FAV4/Pa1kfkWavUwDQYJKoZIhvcNAQELBQAw gZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTwwOgYD VQQDEzNDT01PRE8gUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlY3VyZSBT ZXJ2ZXIgQ0EwHhcNMTgwNjA2MDAwMDAwWhcNMTkwNjA2MjM1OTU5WjCB3zELMAkG A1UEBhMCVVMxDjAMBgNVBBETBTU1MzQzMRIwEAYDVQQIEwlNaW5uZXNvdGExEzAR BgNVBAcTCk1pbm5ldG9ua2ExHDAaBgNVBAkTEzk5MDAgQnJlbiBSb2FkIEVhc3Qx IDAeBgNVBAoTF1VuaXRlZEhlYWx0aCBHcm91cCBJbmMuMSQwIgYDVQQLDBtPcHR1 bSBUZWNoIEVUUCAmIEluZm8gU3J2Y3MxGTAXBgNVBAsTEE11bHRpLURvbWFpbiBT U0wxFjAUBgNVBAMTDWtzMS5vcHR1bS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUjxSRmDFJgAbhvtlUm3z2wOXZuZgvCBqoFWo9s1q3ezyKjyZn 2cgoJajp0aIUf2Er6R3Nku1KYPWzpoWbIkSKeC9n9CoJkdB7hpzfO/TuaLGPmjhw pvapTRcrLuZpL4+Iie3/XVD34Q4LnRmjLPBCpKYvos5lu4Soaku506yjS3AbogvA Sx22m8SsCVCOANwdFZPRBzrIhKJKf4/2bVRIS4cm8wQqyHlak2IupSNDxJyY4Ml0 xiQ4BeKi7p/e00CK8ubCto4V7ZqV4n/ZIpZPzbPIvNhQs47nUkTuOdsVYjQhCgau Hhkua7c6oMkLzG45mLUjbO/nb88eWzldmgIhAgMBAAGjggHsMIIB6DAfBgNVHSME GDAWgBSa8yvaz61Pti+7KkhIKhK3G0LBJDAdBgNVHQ4EFgQU5F788fhs35R63fPZ zyVbc+TpdQswDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMFAGA1UdIARJMEcwOwYMKwYBBAGyMQECAQME MCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgG BmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLmNvbW9kb2NhLmNv bS9DT01PRE9SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0Eu Y3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVT ZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNv bTATBgorBgEEAdZ5AgQDAQH/BAIFADAYBgNVHREEETAPgg1rczEub3B0dW0uY29t MA0GCSqGSIb3DQEBCwUAA4IBAQAAzyJBpM9n8S35I55lhdfgxVvIIThaVg88t3Ve iWz8Fi2vN4P0it/3DDhXW1QCqpIs3ImcyUgxRL+kKRXGV3BtlA1f0ARoe0L10NHv v9dUBkIb8kNqL03LySADTAxJo/o6tXMUv/Z463nUcdArx9xbpEjE7ulxzCA4VaAI Bsnl9qbgYfJ9AZqod9n5OHefUyy+scDcYqC09QFTyZ1BolC0HmCRIgN4TTgf+Pbt 13HzB576iLfy5qh9MgzDI8vFt7jaiiirgDM2H2TN+DtHySqrYkJWCF97bz0GYETC bo6Shas9dXlIp5cdjI5C4W7NnRcgbzsZfhOuV0A0oXP2noAK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I8UkZgxSYAG4b7ZVJt8 9sDl2bmYLwgaqBVqPbNat3s8io8mZ9nIKCWo6dGiFH9hK+kdzZLtSmD1s6aFmyJE ingvZ/QqCZHQe4ac3zv07mixj5o4cKb2qU0XKy7maS+PiInt/11Q9+EOC50Zoyzw QqSmL6LOZbuEqGpLudOso0twG6ILwEsdtpvErAlQjgDcHRWT0Qc6yISiSn+P9m1U SEuHJvMEKsh5WpNiLqUjQ8ScmODJdMYkOAXiou6f3tNAivLmwraOFe2aleJ/2SKW T82zyLzYULOO51JE7jnbFWI0IQoGrh4ZLmu3OqDJC8xuOZi1I2zv52/PHls5XZoC IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326371671954389876938450438366898318069 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Optum Tech ETP & Info Srvcs' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ks1.optum.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26833076201352120947602187288088951306292831536932534884124088126910315828871055515572368766221150925979889648782023175294245782652829065203650264799433613739842563853618546204398106048919367688405731791456074376937283728978645780591879420463595933145529611659390114888397679687849286323891551083910923640436992223974720870953799052984939701583482880370201522765769346189880247467912905108047110102046852545101196395832145524570167248120716879307358771909526646074544665438036274411723091202037757656428641342680440726447747413856367721475515271773686144961120894157359127124102869530376790556704524663032152843747873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e45efcf1f86cdf947addf3d9cf255b73e4e9750b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ks1.optum.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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