chp-prod-new.optumrx.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 09:5d:2c:ab:12:74:a3:b7:d3:a5:02:b7:14:08:af:64 was issued on by COMODO CA Limited.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5d:2c:ab:12:74:a3:b7:d3:a5:02:b7:14:08:af:64
Serial Number (int): 12446841549658071146888962037040852836
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:24:60:a2:37:9e:78:88:10:ce:4d:46:61:be:30:d2:fb:41:51:e1
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 3d:63:ee:cb:5c:bb:be:b5:ee:b3:79:db:d9:b1:81:32:ce:01:73:45
Fingerprint (sha256): 0b:8c:0f:a7:68:59:15:b5:d7:d9:10:a6:51:88:85:b0:5c:3b:5b:3c:05:10:7c:f8:1f:10:e7:4d:17:c7:89:e1

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate chp-prod-new.optumrx.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chp-prod-new.optumrx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chp-prod-new.optumrx.com
ahatpa-rxportal.sxc.com
ahnj-rxportal.sxc.com
amerihealth-rxportal.sxc.com
amr.rxportal.sxc.com
bcbsaz.rxportal.sxc.com
chp-prod-new-ctc.optumrx.com
chp-prod-new-elr.optumrx.com
consumer-prod.prescriptionsolutions.com
ibx-rxportal.sxc.com
m.prescriptionsolutions.com
optumrx.com
pai.rxportal.sxc.com
pharmacy.rxportal.sxc.com
php.rxportal.sxc.com
prescriptionsolutions.com
serveyou.rxportal.sxc.com
sso.optumrx.com
tccba.rxportal.sxc.com
vermontbluerx-rxportal.sxc.com
www.optumrx.com
www.prescriptionsolutions.com

Other certificates including the domain name optumrx.com

(limited to 100 certificates)
wem.optumrx.com
wem.uhc.com
client-prod.prescriptionsolutions.com
cert00068-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
chp.optumrx.com
cert00097-azurecdn.akamaized.net
rxbk1qa.rxbuilder.optumrx.com
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
www.optumrx.com
cert00097-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
chp-stage.optumrx.com
cert00093-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
chp-stage.optumrx.com
cert00093-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
chp-stage-int.optumrx.com
chp.optumrx.com
cert00007-azurecdn.akamaized.net
stg-optummarketingcloud.optum.com
cert00047-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
authclients.optumrx.com
wem.uhc.com
mobile-stg.optumrx.com
cert00097-azurecdn.akamaized.net
aem-stg.optumrx.com
cert00068-azurecdn.akamaized.net
aem.optum.com
cert00097-azurecdn.akamaized.net
chp-stage2.optumrx.com
www.optumrx.com
professionals.optumrx.com
cert00084-azurecdn.akamaized.net
chp-stage2.optumrx.com
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
aem.optum.com
cert00093-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
mobilev8-tst1.optumrx.com
stg-optummarketingcloud.optum.com
cert00068-azurecdn.akamaized.net
aem.optum.com
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
www.optumrx.com
cert00007-azurecdn.akamaized.net
chp-prod-new.optumrx.com
chp-stage.optumrx.com
cert00047-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
goldcoast.optumrx.com
aem.optum.com
cert00093-azurecdn.akamaized.net
cert00047-azurecdn.akamaized.net
stg-optummarketingcloud.optum.com
cert00068-azurecdn.akamaized.net
os-specialty.optumrx.com
iolr.optumrx.com
info.optum.com
rxbk1.rxbuilder.optumrx.com
cert00007-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00093-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
cert00007-azurecdn.akamaized.net
client-prod.prescriptionsolutions.com
cert00007-azurecdn.akamaized.net
aem.optum.com
cert00084-azurecdn.akamaized.net

Certificate

The complete raw certificate details for chp-prod-new.optumrx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvUhz1AjxHFJ25fYU/0F
4IK9SyOUQ0cz/7Pv+t2ZBK+Xrxc40z/8nMWeJCBr4SmWm1k5Nckiax00PpPNtKci
kRnGk3ify3rYW0cUHPm1CSxYZzlrNfJN5mmez945MPiHAa56ig2HJwp5HWQsSZUq
OOh3OjUktEFTkI099RI9W91RKliHROBTNtfIB5DjfTg+bJFf8gbqb3MDTmRep/zD
GupAgeBZCd43OqNda0Q273VlHxkaCkpfEFIzIXqSaTz/xDr50Hqp/XwTWvJigXAu
/q/ZZCmx/jl7+NVPc1ee8RaQfJOZKp994AGz1jt0FgizaA5bYQyFovd0lDu6a+HS
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12446841549658071146888962037040852836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chp-prod-new.optumrx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23601203852431534231013817039512851078705448605655455342051795656982209168548015179925984361979115231597173562794765391740738072683717737959453966247770268384231111320447803713913440305701892847251144816290290651966434413327054007316300396181962694293097480475994800667173474095190562190710677013567254251911759523331974144779538424877712868256562037044261939311599466796164315836084027567087313301739250219007180592212715024044415218030456731412655846820443552973592991146203282681607990489690651503709994483778092718265656595400017668377681958706185567847535505871421342348568175913614670323470068756557537462047437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							962460a2379e788810ce4d4661be30d2fb4151e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001785a029096000004030047304502204e2bfd1888bd7bdf69bf854d72a2555b21873fe5827c68f594e91366a28e856a022100f98ca775c233aade86d1a3f011a910c4ee34a218e06aed2f718f221eef24ef88007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001785a02905300000403004730450220330d5155aa5a4af7f1fcdbf0c504e76c3f88af033bd23dd1ff999f15117358f4022100acf3ba299d22b4a247cecccf9b258010530bce73a89e1bb1f7669eeb1cf7d181
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp-prod-new.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahatpa-rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahnj-rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihealth-rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amr.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbsaz.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp-prod-new-ctc.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp-prod-new-elr.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer-prod.prescriptionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibx-rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.prescriptionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pai.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'php.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescriptionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyou.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccba.rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermontbluerx-rxportal.sxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescriptionsolutions.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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