test.healthcare.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:fc:76:95:26:61:13:a1:0d:e9:27:0e:6f:6c:34:be:bf:ef was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test.healthcare.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fc:76:95:26:61:13:a1:0d:e9:27:0e:6f:6c:34:be:bf:ef
Serial Number (int): 347245637593514546115543750181449319235567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:a7:91:b4:48:96:9c:2f:55:d0:43:51:66:bc:0c:1e:24:c1:d8:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:d7:da:b7:21:ee:44:98:d6:9f:c2:41:f2:bd:70:21:be:1a:82:25
Fingerprint (sha256): 0e:22:60:14:44:eb:5e:5d:3e:e0:91:6a:6c:78:74:a2:12:c3:63:3a:b4:ff:f5:c6:20:82:ce:36:4d:ae:30:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test.healthcare.gov

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.healthcare.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.finder.dev.healthcare.gov
api.finder.imp.healthcare.gov
api.finder.test.healthcare.gov
assets.dev.healthcare.gov
assets.imp.healthcare.gov
assets.test.healthcare.gov
aws-prod.cuidadodesalud.gov
aws-prod.healthcare.gov
ayudalocal.dev.cuidadodesalud.gov
ayudalocal.imp.cuidadodesalud.gov
ayudalocal.test.cuidadodesalud.gov
companyprofiles.dev.healthcare.gov
companyprofiles.imp.healthcare.gov
companyprofiles.test.healthcare.gov
data.test.healthcare.gov
dev-edit.data.healthcare.gov
dev.address.api.healthcare.gov
dev.cuidadodesalud.gov
dev.data.healthcare.gov
dev.healthcare.gov
dev2.cuidadodesalud.gov
dev2.healthcare.gov
finder.dev.healthcare.gov
finder.imp.healthcare.gov
finder.test.healthcare.gov
imp-edit.data.healthcare.gov
imp.address.api.healthcare.gov
imp.cuidadodesalud.gov
imp.data.healthcare.gov
imp.healthcare.gov
imp1a.cuidadodesalud.gov
imp1a.healthcare.gov
imp1b.cuidadodesalud.gov
imp1b.healthcare.gov
imp2-edit.data.healthcare.gov
imp2.cuidadodesalud.gov
imp2.data.healthcare.gov
imp2.healthcare.gov
localhelp.dev.healthcare.gov
localhelp.imp.healthcare.gov
localhelp.imp1a.healthcare.gov
localhelp.prodprime.healthcare.gov
localhelp.test.healthcare.gov
logini.healthcare.gov
logint.healthcare.gov
test.address.api.healthcare.gov
test.cuidadodesalud.gov
test.healthcare.gov
test1.cuidadodesalud.gov
test1.healthcare.gov
test2.cuidadodesalud.gov
test2.healthcare.gov
test3.cuidadodesalud.gov
test3.healthcare.gov

Other certificates including the domain name healthcare.gov

(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
sls-elb.imp.healthcare.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
api.finder.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov

Certificate

The complete raw certificate details for test.healthcare.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO+uDjc173HUu6z+BUJX
bVrUgGXfXaD30HyqwUnvnOYYq/Y0mdK5UxL/AYnl+yu3h/Ojs0XCng7wteUdUb0i
adFzuC1MZVs6RCiDTOZBDmEJLRzlfTas5FdDCaPukHw5cfenWI346VOixY7SIaTj
PmDa9+i50NrMPsc97ZO1O51tXJagbAMQ8lSnyoWlxM9xkVY++2i/W0OvYa2Fp5Fe
VNrO4adQUX5HZJwtX0EduDcMpkiIO1o3vpXNiUwydoxj0hmxuPAhO+iTB7YvMgQs
giUf057vEtzuxYNrwuTWVr2Vp2pWp78E6JRRkljh8s5ATvz1LLc5/qW+hceykwdI
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347245637593514546115543750181449319235567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 13:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 13:21:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.healthcare.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22841085459779742070150836124545865186374943886472894923909415271668756277510912053802147433576882017521747771983033224298618975134393082999979854346524886186854430811971670561930492765349136504194513760147851138941941071448644540654372133127803950957821012350027982752462545233242466529499002662549180226216787431351805798382562526702964247935213557930128775221107839717549931415306328108542035111046777107649777732668451696829740549092127561204074385213567094152647837141576302313196046169888541381035060519773909454614525249058749212943864337651539908939761122553070530320137335894558573129423799667637768507836499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ea791b448969c2f55d0435166bc0c1e24c1d8f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1492 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.dev.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.imp.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.test.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-edit.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.address.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp-edit.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.address.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2-edit.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.data.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp1a.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.prodprime.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logini.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logint.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.address.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.healthcare.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f536de6bc0000040300473045022100cdc46968d5fd7811562278eeb125c0f773ec5bea1b781aaac64c80a17b399ac4022029fd763870eae4f51fd8af1d9514a9e31fc83a55ba916d57b6db38c4f82813270076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f536dee960000040300473045022038496235a42622290a60e5d1dbdb84220849dd4e350398149b146ad27b923e1c022100fa470eaeec6b0c263b078847ffd58b901a4b98e1b2ff7086c93671b728112cd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002a547024f6050f0fe142a1a66f59bf7a6768d53bc4f7ac546166a47cca86c11a0bbc8af3dbfbdaa72d9df131d3d0f572012bc0d11993132c6f56ee56f178ff863dda2b68f022c06e98d74b593b2d53012679a75f3020ea21658dfa867a8cdbd64a857d95ce88e76005dc77cd374e4eba50e1053c8d771ca80ee98d0adfd5b2e3d23f9238d8ad27ff65f0d18fd876ef9a62f90257f6ffcc434ec30cd414940b35f86f07be9d5063f8aa82a9c74b1318a1eb9af432094852718cf878c01d1c887a3991a4900e1b6b781604ba310cb0dbb8b3d87d63be9b1c4d6006c2cc494b4792d7ce7dd60b92375addfef544669dbb2f44a71506b4163d9d6c16ba021ccbcb0