qa-pophealthguideapi.humana.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b3:e2:21:fb:ef:ee:66:f9:09:ef:e6:08:5c:91:02:12 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa-pophealthguideapi.humana.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b3:e2:21:fb:ef:ee:66:f9:09:ef:e6:08:5c:91:02:12
Serial Number (int): 239105959615569651847008406215064617490
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d8:99:4a:0a:de:bf:65:b0:97:20:77:1e:4b:89:6b:dd:66:e3:b9:cb
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ee:bc:58:83:92:3b:60:9e:d4:00:88:e9:3f:9b:15:37:fe:6b:3b:54
Fingerprint (sha256): 08:1b:c6:cf:ec:2c:8f:ab:f2:d2:9e:ab:6d:1a:3f:ca:3a:0b:67:61:8f:8f:a5:a8:d5:fd:95:de:20:1c:9e:17

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/1QIoIly58UI
CRL Distribution Point: http://crls.pki.goog/gts1d4/wKfYOd10-ik.crl

Check the revocation status for certificate qa-pophealthguideapi.humana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-pophealthguideapi.humana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-pophealthguideapi.humana.com

Other certificates including the domain name humana.com

(limited to 100 certificates)
s4.humana.com
dev-ex1site2.preview.humana.com
vanity7.jiveon.com
QA2-hpsspws.humana.com
s2.humana.com
qa3-myhumana.humana.com
testthis.humana.com
vitalitydestinationrewards.humana.com
shop.humana.com
vanity4.lithium.com
cloud.humana.com
ws.humana.com
5699942098141184-fe2.pantheonsite.io
qa-adsl.humana.com
crmsavaya-client.humana.com
tfauth.humana.com
WS.HUMANA.COM
vanity21.jiveon.com
testthisnow.humana.com
s3.humana.com
valuebasedcare.humana.com
int-apicloudgwyg.humana.com
qa-identitydc.humana.com
vanity6.jiveon.com
previewaz-buy.humana.com
vanity21.jiveon.com
vanity3.jiveon.com
apicloudgegwy-service.humana.com
nis.humana.com
vanity6.jiveon.com
homecaresolutions.humana.com
qa-dc.humana.com
tfauth2.humana.com
s4.humana.com
qa-myaccess.humana.com
qa2-myhmhs.humana.com
*.digital-foundation-prod.ase.east2.azure.humana.com
ezprice.humana.com
webtechconfig.humana.com
wap3.humana.com
vanity21.jiveon.com
acuity-uat.humana.com
oohology.com
tfauth2.humana.com
qa-buy.humana.com
vanity21.jiveon.com
test-developer.humana.com
int-mrsimage.humana.com
tls.automattic.com
EMPLOYERS.HUMANA.COM
vanity21.jiveon.com
vanity6.jiveon.com
qa-m.humana.com
testwwww.VaultPOC.Humana.com
vanity3.jiveon.com
qa-hi.humana.com
qa-clarity.humana.com
qa3-carehubws.humana.com
*.prd-int.cc.humana.com
qa-datavaultws.humana.com
vanity7.jiveon.com
s4.humana.com
dev-ex1site2.humana.com
WS.HUMANA-MILITARY.COM
apicegw.humana.com
qaaz-www.humana.com
carehub.humana.com
s2.humana.com
s4.humana.com
edi.humana.com
qa-pophealthguideapi.humana.com
*.prd-qa.cc.humana.com
dental.humana.com
crms-neoload.humana.com
QA-WWW2.ENROLL.HUMANA.COM
reset.humana.com
myaccess.humana.com
vanity7.jiveon.com
supportqa-resolutions.humana.com
api.humana.com
myhmhs.humana.com
devaz-buy.humana.com
hulpenhoop.be
vanity3.jiveon.com
s1.humana.com
LyncAccess.humana.com
s3.humana.com
carehub.humana.com
www.humanamarketpoint.com
payerplatform-tst.humana.com
hatsc.humana.com
qa-www.humana.com
test1023.test3.VaultPOC.Humana.com
vanity2.lithium.com
login.humana.com
qa-wtlsapi.humana.com
test-webmail.humana.com
qa-myaccess.humana.com
qa-go.humana.com
vanity6.jiveon.com

Certificate

The complete raw certificate details for qa-pophealthguideapi.humana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFkRIq4YLg8yeveoXjBU
AAtj1k27IF4xIb6X++D96RWM6OO2RPWO/L2tI+OoSipSnAy0PUnZpwJVZYachEeH
VAf/pGsal528WXR/tmXW/qZd/qWVZdOMt+eJxf1JQ3ZBU4VwHC52OWbOA4YFi1M6
DuFMMV4fBihPnBn/aa/a+yandzPXdsaEYGT5/wiZ4baQOadLR9oWSeTlAjZu+D4T
aktvxmoJ4xfpx1i1rWvschwNnkSTSQ/8I6Vc9K2o+A24u0Rsg1E+AJWfk9gwL0W2
yYYJg40cnYhtNtEX4Tqx+EnjZxiVXMi+uBzJ1n/ZGl2m9Jzeu9nV1kRlb/w8O8Mj
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239105959615569651847008406215064617490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 10:37:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 11:25:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-pophealthguideapi.humana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24786628316146933295772260927823793097302944048912423078217230495896664958406271058609233032824546080625271033976349590723766242600308614084530314895686817189972562027795433858018238680690550355888994262290831090836491724464751966154200315584042481690461294388198055489285713138995377728559539817094717383361966572067430604634431688937203484497302831817154718643379723730467031978387923380671257688502446132520522168619827933197855351784607658823496228706754975434761792659490843615331835781748879702650961413022793772035121325039328995203081812081389949790681606031065330080812739087374508005202764634047274343932851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8994a0adebf65b09720771e4b896bdd66e3b9cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/1QIoIly58UI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-pophealthguideapi.humana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/wKfYOd10-ik.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187fb2768910000040300483046022100c43304f5b2ad8dd422343996b982c017d0cf28d5afbec1fee001287c32fa4ba7022100a60288469c12b2b0a1ed3518e8dbbfaa0a2c9d2435027ad28213bfa4932d4404007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000187fb2768a3000004030046304402204d20b78e1daec88f7cda4f6592a733cd118a962137232f4c5c7da83720ba959d022001bc44c186cd6ebeead869ead7e9220f6638d4eca390c7199632a38242f635b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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