uhccommunityplan.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:d0:1a:1f:c3:3d:40:7e:09:68:3e:b5:47:ae:b5:93 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uhccommunityplan.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d0:1a:1f:c3:3d:40:7e:09:68:3e:b5:47:ae:b5:93
Serial Number (int): 7726667584646182343460164984193856915
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:fb:f2:62:e2:11:b1:63:79:4c:5b:2c:bf:1f:11:76:d6:ea:5f:b3
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 39:b5:48:ec:4a:15:99:b9:67:67:0b:e3:4c:93:11:32:fb:ea:7e:d4
Fingerprint (sha256): 04:a4:e6:d2:b1:02:f1:44:1e:3b:0e:7d:92:1b:b9:78:10:07:5e:e0:6c:12:fe:09:cf:8e:16:4e:95:aa:f5:79

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate uhccommunityplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uhccommunityplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uhccommunityplan.com

Other certificates including the domain name uhccommunityplan.com

(limited to 100 certificates)
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps.optum.com
uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
cloud.news.uhccommunityplan.com
sps-stage.optum.com
microsites-prod-externalprodv2.aemprod.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
info.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
uhccommunityplan.uhc.com
info.uhccommunityplan.com
sps-test.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
sps.optum.com
es.uhccommunityplan.com
microsites-prod-externalprodv5.aemprod.optum.com
uhccommunityplan.uhc.com
es.uhccommunityplan.com
sps.optum.com
caid.uhccommunityplan.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
www.uhccommunityplan.com
sps-test.optum.com
sps-stage.optum.com
info.uhccommunityplan.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
click.news.uhccommunityplan.com
microsites-prod-externalprodv3.aemprod.optum.com
uhccommunityplan.com
sps-test.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
akamai-san51.exacttarget.com
sps-stage.optum.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-test.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
sps-dev.optum.com
uhccommunityplan.uhc.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-dev.optum.com
sps-dev.optum.com
akamai-san51.exacttarget.com
sps.optum.com
www.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
pages.news.uhccommunityplan.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com

Certificate

The complete raw certificate details for uhccommunityplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76Iv+h+wX+BX2gFcgMYS
+A87WTAuSRSLElaVM4vqoSm8dlyU6ta3RewtOm43zt4t0PVA/eD9EO5euErPxjzU
wLLtMMhLr+JnBdspnDFtwmZLB5hgY8DhBoDi6r1vf5zwVNdZuhzVJErDWIX7Rs+z
uuLSps4nrTTL06N4ug4kfrfRKiJ2udx5+cbiJke5ZB7AT2FrxSdeJscKArovFvf4
PZokZCkB48c4Y474+xWflqGnlr5WKX2YxITPWiCCJqcNOEbsMtbsxAT6z98nv8NC
qfgPIFeaJI+fv3bB49iqCaikrE+EWJlLw1bO2rmwAYja9K+z5FP5dNT6nLZinJLq
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7726667584646182343460164984193856915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhccommunityplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30250932479730435428675049191924565937326297503644258714723827156702824516056850259539763517341955141198590884616709971506479990717229075749839461365298923553051267216271900466452124245386091683698240611156610478823128821478975170267459876487794702087956165004444446846483192272438030182332864053631087088924187392652814257286368378712222407927582027698061438617132921739194557951671856951440304303138490555024185642316920745514437985234456367399712317667596241317284630681324932452320957956503707923144229067273667347396355318833931094144777987034381526865259445162139316092453869387519665973350973965546923576453801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19fbf262e211b163794c5b2cbf1f1176d6ea5fb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhccommunityplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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