test3.healthcare.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:b8:b3:a9:fc:0f:2d:97:75:ae:cf:25:bd:7f:b1:89:cf:0f was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test3.healthcare.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b8:b3:a9:fc:0f:2d:97:75:ae:cf:25:bd:7f:b1:89:cf:0f
Serial Number (int): 411299913662278008677792701640424376880911
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:af:85:06:b9:21:a7:01:8d:fb:ae:37:93:ce:4b:1e:84:0b:d6:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:3d:d0:21:f2:02:90:e8:be:61:42:af:4b:aa:2e:58:37:d8:1d:97
Fingerprint (sha256): 11:f6:0e:e1:da:e6:43:54:44:06:68:12:1e:c3:ca:47:9e:5e:2a:75:38:50:5c:9a:2f:6a:e6:bf:c8:e8:ed:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test3.healthcare.gov

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test3.healthcare.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-impl0.cuidadodesalud.gov
aws-impl0.healthcare.gov
aws-impl1b.cuidadodesalud.gov
aws-impl1b.healthcare.gov
aws-impl2.cuidadodesalud.gov
aws-impl2.healthcare.gov
aws-test0.cuidadodesalud.gov
aws-test0.healthcare.gov
aws-test2.cuidadodesalud.gov
aws-test2.healthcare.gov
aws-test3.cuidadodesalud.gov
aws-test3.healthcare.gov
dev.status.healthcare.gov
dev0.ses.api.healthcare.gov
dev1.ses.api.healthcare.gov
dev2.ses.api.healthcare.gov
impl.ses.api.healthcare.gov
impl0.mcr.api.healthcare.gov
impl0.ses.api.healthcare.gov
impl1a.dsrs.api.healthcare.gov
impl1a.ses.api.healthcare.gov
impl1b.ses.api.healthcare.gov
impl2.dsrs.api.healthcare.gov
impl2.ses.api.healthcare.gov
sls-app.test1.healthcare.gov
sls-app.uat0.healthcare.gov
test0.mcr.api.healthcare.gov
test0.ses.api.healthcare.gov
test1.dsrs.api.healthcare.gov
test1.ses.api.healthcare.gov
test2.dsrs.api.healthcare.gov
test2.ses.api.healthcare.gov
test3.dsrs.api.healthcare.gov
test3.healthcare.gov
test3.ses.api.healthcare.gov
test4.cuidadodesalud.gov
test4.healthcare.gov
test4.ses.api.healthcare.gov
test5.cuidadodesalud.gov
test5.healthcare.gov
test6.cuidadodesalud.gov
test6.healthcare.gov
testpe.cuidadodesalud.gov
testpe.healthcare.gov
testpe.ses.api.healthcare.gov
testpe0.dsrs.api.healthcare.gov
testpe0.mcr.api.healthcare.gov
testpe0.ses.api.healthcare.gov
testpe1.dsrs.api.healthcare.gov
testpe1.mcr.api.healthcare.gov
testpe1.ses.api.healthcare.gov
uat0.cuidadodesalud.gov
uat0.dsrs.api.healthcare.gov
uat0.healthcare.gov
uat0.mcr.api.healthcare.gov
uat0.ses.api.healthcare.gov

Other certificates including the domain name healthcare.gov

(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov

Certificate

The complete raw certificate details for test3.healthcare.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7BdNuEkqmUPtwBgW2bP
tl4mxMOrIjr6FJnVXBVbGiNVhA9orzOeoqKdv076j1NJKFjNfg47XyR43JnL3RQP
+5LkIz3acqRSoYt4fSLmFQRBBJ0HM91ihoJwQGe4cYwSNyUHlWGIMmJFJ1Xh4IGM
95hmOXWqHUm78fiBE0Tuf9P6RXoQSALrtocP5h9+LZTgeLYYEU3J+XSHv94gJqB0
EWCfp30TeYGSlV1xwxrX2P2UGRmOx0fR/W/EMzI0wJtJsZLB8DhcQ1l7Iwy5/Z7M
EBBER+vX1Pg0lTxIIvqx9K32p24c+DnddI3pA2A4xg7Diij56SW7yucMOKcgxrqf
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411299913662278008677792701640424376880911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 13:52:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 13:52:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test3.healthcare.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24703437856641101537233801867373256960348063336258141263628996501707583585461159122052290333165390801101457335944107422606761434972397273101279058518987385719740877555021253937808846235826177767086296077937303597831535480425656146242605553722883140775172340556097330294224556286814167069732863008002072598480920948203118462027717213541124302658684748559470354436557704664367106759354545876377960223303836154815457864282655350387972135036923124210298037715240353162029276805552297106844118185553878571567475926138690057001712849408066790295040308942786018176914463527701098552320233313810104778058439843364271852003131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4aaf8506b921a7018dfbae3793ce4b1e840bd6c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl0.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl0.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1b.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1b.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl2.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test0.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test0.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test2.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test3.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test3.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.status.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sls-app.test1.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sls-app.uat0.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe0.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc700dbc20000040300473045022000ca5582a19659036247eb9abb29657eaa6ba6e5872adedaf737142c04df8b2302210099f721cdb554180ffeb2e2110f1482a310ae10c1f95f1193f827f8c2e620c7260077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc700de350000040300483046022100d0d443ab68d30d1b34eb4bc53ec6721316a75d967f80f73bcdfdf678940562200221008af3784315ae90fcc710eeb75aa04127b075ed6184e3bc9185a43e5d90845cfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008d77ac234dc74a83e27b0fd368c4f20807558567d0817d834b068822ae464167b5f4ad8831e1dfb12221b8fdae5fc21b070d100f07236ab1dfdf6103ac1032ba141a966f7663c9c68b052ced2cde4276643ce7b0d9b23b6e2a1ee5dab6f6680774ec70b70d90851e48d9239b6c1d1ee51a718e83c6ecdca5efa6c01d6d261ee1e7dcc72857abec88dcdcf5ea1a248bacb18dcdd99a7a33a2dddae7730aaeac57286f860a75a4383a9bda10204fafb5995ae36630cc7575667f4c0b7a381e7af041d1ccccddf14233f5739cdf64e9f66ad5f5229a0cee6b5d5023e086e89aa5d4e663ba5130104041d5ff0f2c3c475b02d09f22e557d0a0c15655f54e2020cb0