oss-admin.api-stg.uhg.com

Issued by R3

About this certificate

This digital certificate with serial number 04:63:e1:70:d1:f6:21:c8:90:34:27:93:af:14:aa:4a:b6:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oss-admin.api-stg.uhg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:e1:70:d1:f6:21:c8:90:34:27:93:af:14:aa:4a:b6:36
Serial Number (int): 382436760147037847054646465156671995557430
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:43:14:34:e9:4a:43:56:59:2b:54:a9:1b:af:b5:08:48:f1:46:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:ce:2c:59:90:1c:20:28:b0:0a:ba:b0:38:f8:0e:bf:4b:23:af:af
Fingerprint (sha256): 07:bc:17:32:79:d7:a9:46:61:57:73:6c:d0:e4:86:0c:7d:7b:13:06:da:e0:f9:6c:91:d3:c9:96:f7:e2:94:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oss-admin.api-stg.uhg.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oss-admin.api-stg.uhg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oss-admin.api-stg.uhg.com

Other certificates including the domain name uhg.com

(limited to 100 certificates)
uhgvision-mwp-uat.uhg.com
taxadmin-test.uhg.com
ssopacorp-ctc-dev.uhg.com
external-redirect-corpsys-prod.uhg.com
authz-engg.internal.identity.uhg.com
discounts.uhg.com
e1099.unitedhealthgroup.com
ifsstg.uhg.com
ltmelrstgcorp1.uhc.com
ssopacorp2extra-dev.uhg.com
psfinren-test.uhg.com
globalselfservice-test.uhg.com
hive.hcp.uhg.com
uhgfidelity.uhg.com
federate.uhg.com
ssopacorp-elr-dev.uhg.com
securityplatform-dev.optum.com
authz-nonprod.internal.identity.uhg.com
globalselfservice-elr.unitedhealthgroup.com
bankdata.uhg.com
hrdirecthelpdesk-test.uhg.com
hive.hcp.uhg.com
signon.uhg.com
demo58-ihrconnect.uhg.com
external-redirect-corpsys-prod.uhg.com
webex.uhg.com
scm-stg.uhg.com
aaweb.uhc.com
vertex-test.uhg.com
copsarchive-stg.uhg.com
ssopacorp2extra-stg.uhg.com
ssopacorp-stg.uhg.com
www-stage-tmp.unitedhealthgroup.com
benefitslogout.uhg.com
authgateway3.entiam.uhg.com
ssopacorp-elr-dev.uhg.com
ssopacorp-ctc-dev.uhg.com
uhgvision-mwp.uhg.com
wapdmzfe.optum.com
authgateway3proxy-stg.entiam.uhg.com
image.international.qbe.com
authgateway3.entiam.uhg.com
vertexrpt-dev.uhg.com
cultureambassador.uhg.com
domotest.uhg.com
copsarchive.uhc.com
epasstst.uhg.com
careers-index.uhg.com
csot.optum.com
e1099.unitedhealthgroup.com
orbit-microstrategy-mob10.uhg.com
ai.uhg.com
vitalsigns2017logout-test.uhg.com
ssopacorp2extra-dev.uhg.com
ssopacorp-elr-dev.uhg.com
oss-admin.api-stg.uhg.com
e1099.unitedhealthgroup.com
emailimages.uhg.com
copsarchive-filevending-tst.uhg.com
uhgvision-uat.uhg.com
copsarchive.uhc.com
www-2018.unitedhealthgroup.com
scm-stg.uhg.com
emailimages.uhg.com
image.international.qbe.com
ssopacorp-ctc-dev.uhg.com
ssopacorp-elr-dev.uhg.com
hub.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
ltmctcprdcorp3.uhc.com
federatedr.uhg.com
benefitslogout.uhg.com
myfinance.uhg.com
www.unitedhealthgroup.com
epasstst.uhg.com
ssopacorp-stg.uhg.com
healthshare.uhg.com
uhgvision-txn-uat.uhg.com
uhgvision-pwp.uhg.com
globalselfservice-clock-stage.uhg.com
ssopfcorp2-dev-srv.uhg.com
communications.uhg.com
copsarchive-ingestion.uhc.com
concur.uhc.com
externalaffairs.uhg.com
copsarchive.uhg.com
uhgvision-stg.uhg.com
image.international.qbe.com
ssoiamextra.uhg.com
volunteering-test.uhg.com
copsarchive-filevending-tst.uhc.com
san-3-s10.tlsprovisioning.exacttarget.com
benefitsenrolltest.uhg.com
image.international.qbe.com
sso.uhg.com
ssoiamextra-stg.uhg.com
recognition.uhg.com
orbit-microstrategy-mob10.uhg.com
uhgvision-pwp.uhg.com
talentacquisition-pz-stage.uhg.com

Certificate

The complete raw certificate details for oss-admin.api-stg.uhg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPi9j6J5njdPPE9fRCYt
DCMsWbb3ZvfM4z5qkrVASXpz8OGl9Z4EIJiROF4Av1Udb4BamisApzij24N0J8oN
fVVQTjAr97SvYpBYQ+EUWTA6eieLHx0NHQBdn7n3h94tkcyejtpr+IDpk/xDhycB
8r4Dx2DOxig649xGAq5o87nhLlpqvBcrGoYCfPuz0evahu7O06tBgbWfeJLogQHn
wlzD3bSbKrBv0WfmN3C0gjBZn0Rr4H239rfsn+o4cgPVdLTjKLw2MZN3uWDDoPHF
fEuZySLHM9KZmg6/z9KBf/Cbj1WtgjUsmOy63Dd7ZnRxkzCvqhMbrJmx3H2htoi0
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382436760147037847054646465156671995557430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 10:39:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 10:39:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oss-admin.api-stg.uhg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19815834073457257729661811688500267191172347292110343978251211908649283859505973505670588572507541032290064806394533380911986246186301179917066664538014501392180761356211752831940592893156248623467759355172283388543683410002660131763168491276154791777881777190632626457229133573142496635589542205548141895354005870354457652625425206244152981888859329119558587755552469140016712548494427777928049773564771431800918750427383266982190963147826961922739870111327352985490665402093383402837965511296383211163969995523357381895225783193661953698373807268596460276420792621144189890329315712690514232858897927344547277878511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44431434e94a4356592b54a91bafb50848f14646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss-admin.api-stg.uhg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043d89e5a8eb3f3159df87db84fe6859fbd42f0d6ed3c32e28976d3728d7c149a614152ab161f89441a5fb7738f7ddaef72aba3c0c2fd0d2fbc656ca5d9d0425141cdbdf52d28da676c4c72b04db2523d9c9f9d99e15215ce5baaceaa184f12597de49014bbbfbfba0cfc5e849b1a6489ae6c2f7fd2a80e3b449354187aecc23da352d0b6b686a2a7a90f32f761b3e8c7701f9dd8152bb730a983d98bed9d775c0f716ebccaba64a54c93a2b4971e5df54ad4f46b057cc8cd33b9970c604e79c321e44489846f8b11fb56aaa188f1d85d7cc45b757d86c3f0580a8b7a332da87ab65eda716ad3fd28ec90c68bf8448bdcac5fb3449001b783d004856e485b4a58