aa-selfservice-stage.unitedhealthgroup.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 52:7f:91:dc:0e:a7:1f:97:7f:30:a8:d4:3e:89:7f:f4 was issued on by COMODO CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: UnitedHealth Group IT
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 52:7f:91:dc:0e:a7:1f:97:7f:30:a8:d4:3e:89:7f:f4
Serial Number (int): 109659075739520137254660103902606229492
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b9:b1:c1:6f:ce:2f:b9:6e:e8:79:3f:fb:49:c9:67:30:92:1e:51:d9
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 2f:08:78:79:a7:66:af:c1:67:9b:00:c9:fe:8a:61:66:8b:a4:3d:b7
Fingerprint (sha256): 0a:91:4d:ab:1f:ee:2f:3e:db:8b:fd:e8:a3:8c:0b:57:63:7c:70:72:a1:be:70:23:37:21:91:28:c3:f9:32:15

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate aa-selfservice-stage.unitedhealthgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aa-selfservice-stage.unitedhealthgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa-selfservice-stage.unitedhealthgroup.com

Other certificates including the domain name unitedhealthgroup.com

(limited to 100 certificates)
spsadmin.unitedhealthgroup.com
lmscontentstg.unitedhealthgroup.com
signon.unitedhealthgroup.com
careers-test.unitedhealthgroup.com
e1099.unitedhealthgroup.com
federate.uhg.com
globalselfservice-elr.unitedhealthgroup.com
fedclstage.unitedhealthgroup.com
globalselfservice-tmp.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
external-redirect-corpsys-prod.uhg.com
aaweb.uhc.com
concurtest.unitedhealthgroup.com
ssopacorp2extra-stg.uhg.com
www-stage-tmp.unitedhealthgroup.com
authgateway3.entiam.uhg.com
careers-stg.unitedhealthgroup.com
globalselfservice.unitedhealthgroup.com
authgateway3.entiam.uhg.com
concurtest.unitedhealthgroup.com
e1099.unitedhealthgroup.com
globalselfservice-gw.unitedhealthgroup.com
e1099.unitedhealthgroup.com
www-2018.unitedhealthgroup.com
careers-dev.unitedhealthgroup.com
hub.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
e1099.unitedhealthgroup.com
federatedr.uhg.com
aa-selfservice-stage.unitedhealthgroup.com
www.unitedhealthgroup.com
odplms-stg.unitedhealthgroup.com
egrc-portal.unitedhealthgroup.com
hrdirectstage.unitedhealthgroup.com
signontest.unitedhealthgroup.com
ssoiamextra.uhg.com
sso.uhg.com
ssoiamextra-stg.uhg.com
signontest.unitedhealthgroup.com
careers.unitedhealthgroup.com
stage-sso.uhg.com
globalselfservice-elr.unitedhealthgroup.com
egrc.unitedhealthgroup.com
ssoi.uhg.com
odplmsstg.unitedhealthgroup.com
aem.optum.com
careers-tst.unitedhealthgroup.com
globalselfservice.unitedhealthgroup.com
aem.optum.com
signon.unitedhealthgroup.com
odplms.unitedhealthgroup.com
careers.unitedhealthgroup.com
sso.uhg.com
signon.unitedhealthgroup.com
authgateway3.entiam.uhg.com
www-2019.unitedhealthgroup.com
sso.uhg.com
aa-selfservice.unitedhealthgroup.com
learnsourcetmp.unitedhealthgroup.com
egrc.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
signon.unitedhealthgroup.com
concurtest.unitedhealthgroup.com
aaweb-stage.uhc.com
signontest.unitedhealthgroup.com
globalselfservice-elr.unitedhealthgroup.com
odplms.unitedhealthgroup.com
federate.uhg.com
concur.unitedhealthgroup.com
referrals.unitedhealthgroup.com
authgateway3-stg.entiam.uhg.com
unitedhealthgroup.com
referrals.unitedhealthgroup.com
aaweb-stage.uhc.com
ediscovery.unitedhealthgroup.com
federatedr.uhg.com
careers-dev.unitedhealthgroup.com
www-2019.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
www-2019.unitedhealthgroup.com
dvprod.optum.com
stage-ssoi.uhg.com
careers-test.unitedhealthgroup.com
lmscontentstg.unitedhealthgroup.com
aaweb-stage.uhc.com
learnsource-gw.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
ssoi.uhg.com
careers.unitedhealthgroup.com
concur.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
concur.unitedhealthgroup.com
dvprod.optum.com
learnsource-ma-stage.unitedhealthgroup.com
odplms.unitedhealthgroup.com
www-stg-ctc.unitedhealthgroup.com
globalselfservicestg.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
uhcathome.com

Certificate

The complete raw certificate details for aa-selfservice-stage.unitedhealthgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqr52CIiggiXKN/NT/tA
m5oJUlZcCsyfThK6j8lMcgnRykdBo2xUFC/1laPFjeF0t4iNl8dUMeZ4wyZn6lsY
VMzb70+R1E7rob8KUkqWQ+DXCQQg2DuDcRFLuzThiv45f1YgFLsjU5S/BJgBZYbr
0NN6DUJ1QtGD8WBxCFdAWakCxvy8QUSXCU2uoin6u0uLQvgisvwcrovk1MyvJLw4
VPBeTMtm4eqUVpOOtqQUlJi0TTLxRjLHeD3KXlcFkW6XyVGB1DRUCxtZ3qpF6xoy
8kY7tzD60/KGXrNh5HKSmP+TDvv+eUGFMC5amzmuZYJzdA8Rjt8eMcVfkRvnm9q4
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109659075739520137254660103902606229492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aa-selfservice-stage.unitedhealthgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23059682889158685653504951570894056405667027269779295539456504776299972914392724829998403442257567622043973957058003067877928526854705321228589072561683237687005354549033234231476373421496607929238897261085235403978949445040789031253350280605135719110902129003013270072647256024233159738821018008644743175357806717958911074451618248650522914125686279006802571150201131380540577688975820808099096656976715260100206245370232058278910426804932405201534227564162075015110845385744110186726804023598480171042825022417546955429979410712723194253813862633079034850804552823641116844384045824230340582405535537754463826262241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9b1c16fce2fb96ee8793ffb49c96730921e51d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-selfservice-stage.unitedhealthgroup.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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