test.healthcare.gov
Issued by R3
About this certificate
This digital certificate with serial number 03:fc:76:95:26:61:13:a1:0d:e9:27:0e:6f:6c:34:be:bf:ef was issued on by Let's Encrypt.
With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=test.healthcare.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:fc:76:95:26:61:13:a1:0d:e9:27:0e:6f:6c:34:be:bf:efSerial Number (int): 347245637593514546115543750181449319235567
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1e:a7:91:b4:48:96:9c:2f:55:d0:43:51:66:bc:0c:1e:24:c1:d8:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ac:d7:da:b7:21:ee:44:98:d6:9f:c2:41:f2:bd:70:21:be:1a:82:25
Fingerprint (sha256): 0e:22:60:14:44:eb:5e:5d:3e:e0:91:6a:6c:78:74:a2:12:c3:63:3a:b4:ff:f5:c6:20:82:ce:36:4d:ae:30:12
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate test.healthcare.gov
54
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.healthcare.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.finder.dev.healthcare.gov
api.finder.imp.healthcare.gov
api.finder.test.healthcare.gov
assets.dev.healthcare.gov
assets.imp.healthcare.gov
assets.test.healthcare.gov
aws-prod.cuidadodesalud.gov
aws-prod.healthcare.gov
ayudalocal.dev.cuidadodesalud.gov
ayudalocal.imp.cuidadodesalud.gov
ayudalocal.test.cuidadodesalud.gov
companyprofiles.dev.healthcare.gov
companyprofiles.imp.healthcare.gov
companyprofiles.test.healthcare.gov
data.test.healthcare.gov
dev-edit.data.healthcare.gov
dev.address.api.healthcare.gov
dev.cuidadodesalud.gov
dev.data.healthcare.gov
dev.healthcare.gov
dev2.cuidadodesalud.gov
dev2.healthcare.gov
finder.dev.healthcare.gov
finder.imp.healthcare.gov
finder.test.healthcare.gov
imp-edit.data.healthcare.gov
imp.address.api.healthcare.gov
imp.cuidadodesalud.gov
imp.data.healthcare.gov
imp.healthcare.gov
imp1a.cuidadodesalud.gov
imp1a.healthcare.gov
imp1b.cuidadodesalud.gov
imp1b.healthcare.gov
imp2-edit.data.healthcare.gov
imp2.cuidadodesalud.gov
imp2.data.healthcare.gov
imp2.healthcare.gov
localhelp.dev.healthcare.gov
localhelp.imp.healthcare.gov
localhelp.imp1a.healthcare.gov
localhelp.prodprime.healthcare.gov
localhelp.test.healthcare.gov
logini.healthcare.gov
logint.healthcare.gov
test.address.api.healthcare.gov
test.cuidadodesalud.gov
test.healthcare.gov
test1.cuidadodesalud.gov
test1.healthcare.gov
test2.cuidadodesalud.gov
test2.healthcare.gov
test3.cuidadodesalud.gov
test3.healthcare.gov
api.finder.imp.healthcare.gov
api.finder.test.healthcare.gov
assets.dev.healthcare.gov
assets.imp.healthcare.gov
assets.test.healthcare.gov
aws-prod.cuidadodesalud.gov
aws-prod.healthcare.gov
ayudalocal.dev.cuidadodesalud.gov
ayudalocal.imp.cuidadodesalud.gov
ayudalocal.test.cuidadodesalud.gov
companyprofiles.dev.healthcare.gov
companyprofiles.imp.healthcare.gov
companyprofiles.test.healthcare.gov
data.test.healthcare.gov
dev-edit.data.healthcare.gov
dev.address.api.healthcare.gov
dev.cuidadodesalud.gov
dev.data.healthcare.gov
dev.healthcare.gov
dev2.cuidadodesalud.gov
dev2.healthcare.gov
finder.dev.healthcare.gov
finder.imp.healthcare.gov
finder.test.healthcare.gov
imp-edit.data.healthcare.gov
imp.address.api.healthcare.gov
imp.cuidadodesalud.gov
imp.data.healthcare.gov
imp.healthcare.gov
imp1a.cuidadodesalud.gov
imp1a.healthcare.gov
imp1b.cuidadodesalud.gov
imp1b.healthcare.gov
imp2-edit.data.healthcare.gov
imp2.cuidadodesalud.gov
imp2.data.healthcare.gov
imp2.healthcare.gov
localhelp.dev.healthcare.gov
localhelp.imp.healthcare.gov
localhelp.imp1a.healthcare.gov
localhelp.prodprime.healthcare.gov
localhelp.test.healthcare.gov
logini.healthcare.gov
logint.healthcare.gov
test.address.api.healthcare.gov
test.cuidadodesalud.gov
test.healthcare.gov
test1.cuidadodesalud.gov
test1.healthcare.gov
test2.cuidadodesalud.gov
test2.healthcare.gov
test3.cuidadodesalud.gov
test3.healthcare.gov
Other certificates including the domain name healthcare.gov
(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
sls-elb.imp.healthcare.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
api.finder.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
sls-elb.imp.healthcare.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
api.finder.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
Certificate
The complete raw certificate details for test.healthcare.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKtDCCCZygAwIBAgISA/x2lSZhE6EN6ScOb2w0vr/vMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDcxMzIxMDJaFw0yNDA4MDUxMzIxMDFaMB4xHDAaBgNVBAMT E3Rlc3QuaGVhbHRoY2FyZS5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0764ONzXvcdS7rP4FQldtWtSAZd9doPfQfKrBSe+c5hir9jSZ0rlTEv8B ieX7K7eH86OzRcKeDvC15R1RvSJp0XO4LUxlWzpEKINM5kEOYQktHOV9NqzkV0MJ o+6QfDlx96dYjfjpU6LFjtIhpOM+YNr36LnQ2sw+xz3tk7U7nW1clqBsAxDyVKfK haXEz3GRVj77aL9bQ69hrYWnkV5U2s7hp1BRfkdknC1fQR24NwymSIg7Wje+lc2J TDJ2jGPSGbG48CE76JMHti8yBCyCJR/Tnu8S3O7Fg2vC5NZWvZWnalanvwTolFGS WOHyzkBO/PUstzn+pb6Fx7KTB0hTAgMBAAGjggfWMIIH0jAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFB6nkbRIlpwvVdBDUWa8DB4kwdj2MB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIF3QYDVR0RBIIF1DCCBdCCHWFwaS5maW5kZXIuZGV2LmhlYWx0aGNh cmUuZ292gh1hcGkuZmluZGVyLmltcC5oZWFsdGhjYXJlLmdvdoIeYXBpLmZpbmRl ci50ZXN0LmhlYWx0aGNhcmUuZ292ghlhc3NldHMuZGV2LmhlYWx0aGNhcmUuZ292 ghlhc3NldHMuaW1wLmhlYWx0aGNhcmUuZ292ghphc3NldHMudGVzdC5oZWFsdGhj YXJlLmdvdoIbYXdzLXByb2QuY3VpZGFkb2Rlc2FsdWQuZ292ghdhd3MtcHJvZC5o ZWFsdGhjYXJlLmdvdoIhYXl1ZGFsb2NhbC5kZXYuY3VpZGFkb2Rlc2FsdWQuZ292 giFheXVkYWxvY2FsLmltcC5jdWlkYWRvZGVzYWx1ZC5nb3aCImF5dWRhbG9jYWwu dGVzdC5jdWlkYWRvZGVzYWx1ZC5nb3aCImNvbXBhbnlwcm9maWxlcy5kZXYuaGVh bHRoY2FyZS5nb3aCImNvbXBhbnlwcm9maWxlcy5pbXAuaGVhbHRoY2FyZS5nb3aC I2NvbXBhbnlwcm9maWxlcy50ZXN0LmhlYWx0aGNhcmUuZ292ghhkYXRhLnRlc3Qu aGVhbHRoY2FyZS5nb3aCHGRldi1lZGl0LmRhdGEuaGVhbHRoY2FyZS5nb3aCHmRl di5hZGRyZXNzLmFwaS5oZWFsdGhjYXJlLmdvdoIWZGV2LmN1aWRhZG9kZXNhbHVk LmdvdoIXZGV2LmRhdGEuaGVhbHRoY2FyZS5nb3aCEmRldi5oZWFsdGhjYXJlLmdv doIXZGV2Mi5jdWlkYWRvZGVzYWx1ZC5nb3aCE2RldjIuaGVhbHRoY2FyZS5nb3aC GWZpbmRlci5kZXYuaGVhbHRoY2FyZS5nb3aCGWZpbmRlci5pbXAuaGVhbHRoY2Fy ZS5nb3aCGmZpbmRlci50ZXN0LmhlYWx0aGNhcmUuZ292ghxpbXAtZWRpdC5kYXRh LmhlYWx0aGNhcmUuZ292gh5pbXAuYWRkcmVzcy5hcGkuaGVhbHRoY2FyZS5nb3aC FmltcC5jdWlkYWRvZGVzYWx1ZC5nb3aCF2ltcC5kYXRhLmhlYWx0aGNhcmUuZ292 ghJpbXAuaGVhbHRoY2FyZS5nb3aCGGltcDFhLmN1aWRhZG9kZXNhbHVkLmdvdoIU aW1wMWEuaGVhbHRoY2FyZS5nb3aCGGltcDFiLmN1aWRhZG9kZXNhbHVkLmdvdoIU aW1wMWIuaGVhbHRoY2FyZS5nb3aCHWltcDItZWRpdC5kYXRhLmhlYWx0aGNhcmUu Z292ghdpbXAyLmN1aWRhZG9kZXNhbHVkLmdvdoIYaW1wMi5kYXRhLmhlYWx0aGNh cmUuZ292ghNpbXAyLmhlYWx0aGNhcmUuZ292ghxsb2NhbGhlbHAuZGV2LmhlYWx0 aGNhcmUuZ292ghxsb2NhbGhlbHAuaW1wLmhlYWx0aGNhcmUuZ292gh5sb2NhbGhl bHAuaW1wMWEuaGVhbHRoY2FyZS5nb3aCImxvY2FsaGVscC5wcm9kcHJpbWUuaGVh bHRoY2FyZS5nb3aCHWxvY2FsaGVscC50ZXN0LmhlYWx0aGNhcmUuZ292ghVsb2dp bmkuaGVhbHRoY2FyZS5nb3aCFWxvZ2ludC5oZWFsdGhjYXJlLmdvdoIfdGVzdC5h ZGRyZXNzLmFwaS5oZWFsdGhjYXJlLmdvdoIXdGVzdC5jdWlkYWRvZGVzYWx1ZC5n b3aCE3Rlc3QuaGVhbHRoY2FyZS5nb3aCGHRlc3QxLmN1aWRhZG9kZXNhbHVkLmdv doIUdGVzdDEuaGVhbHRoY2FyZS5nb3aCGHRlc3QyLmN1aWRhZG9kZXNhbHVkLmdv doIUdGVzdDIuaGVhbHRoY2FyZS5nb3aCGHRlc3QzLmN1aWRhZG9kZXNhbHVkLmdv doIUdGVzdDMuaGVhbHRoY2FyZS5nb3YwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvB vyiF7PhkbgAAAY9Tbea8AAAEAwBHMEUCIQDNxGlo1f14EVYieO6xJcD3c+xb6ht4 GqrGTIChezmaxAIgKf12OHDq5PUf2K8dlRSp4x/IOlW6kW1Xtts4xPgoEycAdgAZ mBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY9Tbe6WAAAEAwBHMEUC IDhJYjWkJiIpCmDl0dvbhCIISd1ONQOYFJsUatJ7kj4cAiEA+kcOruxrDCY7B4hH /9WLkBpLmOGy/3CGyTZxtygRLNYwDQYJKoZIhvcNAQELBQADggEBAAKlRwJPYFDw /hQqGmb1m/emdo1TvE96xUYWakfMqGwRoLvIrz2/vapy2d8THT0PVyASvA0RmTEy xvVu5W8Xj/hj3aK2jwIsBumNdLWTstUwEmeadfMCDqIWWN+oZ6jNvWSoV9lc6I52 AF3HfNN05OulDhBTyNdxyoDumNCt/VsuPSP5I42K0n/2Xw0Y/Ydu+aYvkCV/b/zE NOwwzUFJQLNfhvB76dUGP4qoKpx0sTGKHrmvQyCUhScYz4eMAdHIh6OZGkkA4ba3 gWBLoxDLDbuLPYfWO+mxxNYAbCzElLR5LXzn3WC5I3Wt3+9URmnbsvRKcVBrQWPZ 1sFroCHMvLA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO+uDjc173HUu6z+BUJX bVrUgGXfXaD30HyqwUnvnOYYq/Y0mdK5UxL/AYnl+yu3h/Ojs0XCng7wteUdUb0i adFzuC1MZVs6RCiDTOZBDmEJLRzlfTas5FdDCaPukHw5cfenWI346VOixY7SIaTj PmDa9+i50NrMPsc97ZO1O51tXJagbAMQ8lSnyoWlxM9xkVY++2i/W0OvYa2Fp5Fe VNrO4adQUX5HZJwtX0EduDcMpkiIO1o3vpXNiUwydoxj0hmxuPAhO+iTB7YvMgQs giUf057vEtzuxYNrwuTWVr2Vp2pWp78E6JRRkljh8s5ATvz1LLc5/qW+hceykwdI UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347245637593514546115543750181449319235567 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 13:21:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 13:21:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.healthcare.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22841085459779742070150836124545865186374943886472894923909415271668756277510912053802147433576882017521747771983033224298618975134393082999979854346524886186854430811971670561930492765349136504194513760147851138941941071448644540654372133127803950957821012350027982752462545233242466529499002662549180226216787431351805798382562526702964247935213557930128775221107839717549931415306328108542035111046777107649777732668451696829740549092127561204074385213567094152647837141576302313196046169888541381035060519773909454614525249058749212943864337651539908939761122553070530320137335894558573129423799667637768507836499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ea791b448969c2f55d0435166bc0c1e24c1d8f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1492 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.dev.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.imp.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.test.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-edit.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp-edit.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2-edit.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.data.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp1a.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.prodprime.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logini.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logint.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.healthcare.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f536de6bc0000040300473045022100cdc46968d5fd7811562278eeb125c0f773ec5bea1b781aaac64c80a17b399ac4022029fd763870eae4f51fd8af1d9514a9e31fc83a55ba916d57b6db38c4f82813270076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f536dee960000040300473045022038496235a42622290a60e5d1dbdb84220849dd4e350398149b146ad27b923e1c022100fa470eaeec6b0c263b078847ffd58b901a4b98e1b2ff7086c93671b728112cd6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0002a547024f6050f0fe142a1a66f59bf7a6768d53bc4f7ac546166a47cca86c11a0bbc8af3dbfbdaa72d9df131d3d0f572012bc0d11993132c6f56ee56f178ff863dda2b68f022c06e98d74b593b2d53012679a75f3020ea21658dfa867a8cdbd64a857d95ce88e76005dc77cd374e4eba50e1053c8d771ca80ee98d0adfd5b2e3d23f9238d8ad27ff65f0d18fd876ef9a62f90257f6ffcc434ec30cd414940b35f86f07be9d5063f8aa82a9c74b1318a1eb9af432094852718cf878c01d1c887a3991a4900e1b6b781604ba310cb0dbb8b3d87d63be9b1c4d6006c2cc494b4792d7ce7dd60b92375addfef544669dbb2f44a71506b4163d9d6c16ba021ccbcb0