api-gateway.qa.carespree.ai

- Anthem, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:4f:da:5d:01:5a:ba:f6:92:d9:90:3e:59:b3:4a:78 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Anthem, Inc.

Organization: Anthem, Inc.
State / Province: Indiana
Locality: Indianapolis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4f:da:5d:01:5a:ba:f6:92:d9:90:3e:59:b3:4a:78
Serial Number (int): 1743848381541048388526697948615232120
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 26:df:c4:fd:3e:ca:0c:ea:e1:75:bc:b2:a3:eb:e0:c8:f5:1a:68:8f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 77:26:70:05:60:9c:d6:e0:9a:5a:66:2f:11:9e:82:26:bc:90:5e:00
Fingerprint (sha256): 09:a7:a3:d4:da:71:35:5b:69:cb:01:4f:f6:3c:9d:13:cf:66:4b:60:c3:a9:98:b2:89:3b:77:75:8e:df:de:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate api-gateway.qa.carespree.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-gateway.qa.carespree.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-gateway.qa.carespree.ai

Other certificates including the domain name carespree.ai

(limited to 100 certificates)
carespree.ai
saml.anthem.com
web2.test.carespree.ai
api-gateway.qa.carespree.ai
secure-gateway-ak.anthem.com
api-gateway.prod1.dr1.carespree.ai
secure-gateway-ak.anthem.com
staging.anthem.com
carespree.ai
secure-gateway.dev.va.antheminc.com
saml.uat.anthem.com
www.anthem.com
api-gateway.dev.carespree.ai
saml.anthem.com
saml.uat.anthem.com
saml.anthem.com
web2-origin.carespree.ai
web-origin.carespree.ai
api.test.carespree.ai
web-origin.uat.carespree.ai
saml.anthem.com
staging.anthem.com
api2.test.carespree.ai
carespree.ai
api.carespree.ai
staging.anthem.com
api-gateway2.perf.carespree.ai
api-gateway.dev4.carespree.ai
secure-gateway-ak.anthem.com
web2-origin.carespree.ai
secure-gateway.dev.va.antheminc.com
staging.anthem.com
web.dev.carespree.ai
web.test.carespree.ai
web-dr1-origin.carespree.ai
saml.uat.anthem.com
secure-gateway.dev.va.antheminc.com
staging.anthem.com
secure-gateway-ak.anthem.com
www.anthem.com
secure-gateway.dev.va.antheminc.com
staging.anthem.com
secure-gateway.dev.va.antheminc.com
staging.anthem.com
saml.anthem.com
secure-gateway-ak.anthem.com
api2.dev.carespree.ai
web-origin.uat.carespree.ai
web.uat.carespree.ai
web.dr1-origin.carespree.ai
secure-gateway.dev.va.antheminc.com
api.test.carespree.ai
staging.anthem.com
api-gateway2.sit.carespree.ai
carespree.ai
www.anthem.com
web.carespree.ai
saml.anthem.com
web2-origin.carespree.ai
secure-gateway.dev.va.antheminc.com
secure-gateway.dev.va.antheminc.com
web-origin.uat.carespree.ai
saml.anthem.com
web2-origin.carespree.ai
saml.anthem.com
secure-gateway-ak.anthem.com
www.anthem.com
saml.uat.anthem.com
origin.sydneycare.ai
saml.uat.anthem.com
web2.dev.carespree.ai
saml.anthem.com
staging.anthem.com
secure-gateway-ak.anthem.com
www.anthem.com
web2.dev.carespree.ai
saml.uat.anthem.com
secure-gateway.dev.va.antheminc.com
web2.dr1-origin.carespree.ai
saml.anthem.com
api-gateway.test.carespree.ai
www.anthem.com
staging.anthem.com
api-gateway.perf.carespree.ai
staging.anthem.com
39jXpje4hfJQ5q32.stg-origin.carespree.ai
saml.uat.anthem.com
web2.carespree.ai
carespree.ai
api-gateway2.uat.carespree.ai
saml.uat.anthem.com
www.anthem.com
api-gateway.prod2.dr1.carespree.ai
api-gateway.test.carespree.ai
saml.anthem.com
api-gateway.prod4.carespree.ai
carespree.ai
staging.anthem.com
api-gateway2.qa.carespree.ai
origin.sydneycare.ai

Certificate

The complete raw certificate details for api-gateway.qa.carespree.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qwnbA7E0/PR9Y6IJ7Y
apltui9CpRMmtnWV5rRza3J/YBBaF5NaoJFVE/3byn4IFdovub5FGHgWiZp+tBMP
Jl/Ph0eSzSbXegY74kTCQfSBAhBRNKpRLVcKnWhTDB+gqeEIRbQWNK+hXScfFIHl
ZktydAjEdeNmw90MwZgo901OCboqfIp0YH3/DkFs94Mgnh3Rw8K4/h9zPdCjKtLP
QOcllIKDFrsaFPLXAdGXYJi5NZKFp4GglAjy02V60h00MJvLMrZ1aRI0o2RKxTdB
6t9dQOc4HnxIUZU66YbhizdFpXH9z9OXHPPCw/qrhQZm+z6WQ5nUKhMKUf+VvlUY
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1743848381541048388526697948615232120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Anthem, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-gateway.qa.carespree.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21173857153178023029361935986940447178371772040181317477634539936389793853076170977242109172249124679105218593806162470035641321727420406641420674105468899401586312348966335639230469870936355058404477032162115509356195786822146660135192581964651254610049997705200972534807075393405978033925230580131350904628412830598472759095777649019200904111939158310862640620447996772368104330345894753920105232570104876920871167697042571215008679771762293254829440538210001376559541443296994650871884056724824540196041706975315109067603165940693252991884124247919503283311328193430684227322233412233442070565634176557335274920081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26dfc4fd3eca0ceae175bcb2a3ebe0c8f51a688f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gateway.qa.carespree.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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