globalselfservice.unitedhealthgroup.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number f2:da:24:63:78:f1:5a:d7:ac:62:ce:4f:5f:44:6e:06 was issued on by COMODO CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f2:da:24:63:78:f1:5a:d7:ac:62:ce:4f:5f:44:6e:06
Serial Number (int): 322805833742874035330589326205748801030
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cf:c8:41:fc:6f:c0:74:a9:9b:05:da:0f:fc:8e:d5:1b:79:34:ed:94
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 97:85:ab:35:f8:65:1d:4c:dc:f2:16:a2:5e:f5:a1:d4:87:b5:84:b4
Fingerprint (sha256): 13:e3:7c:55:0a:f0:80:4d:4a:d7:80:a8:e9:5c:24:d4:7d:f5:71:89:93:9d:09:f6:b3:bb:c2:0a:df:5a:95:23

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate globalselfservice.unitedhealthgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globalselfservice.unitedhealthgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globalselfservice.unitedhealthgroup.com

Other certificates including the domain name unitedhealthgroup.com

(limited to 100 certificates)
spsadmin.unitedhealthgroup.com
lmscontentstg.unitedhealthgroup.com
signon.unitedhealthgroup.com
careers-test.unitedhealthgroup.com
e1099.unitedhealthgroup.com
federate.uhg.com
globalselfservice-elr.unitedhealthgroup.com
fedclstage.unitedhealthgroup.com
globalselfservice-tmp.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
external-redirect-corpsys-prod.uhg.com
aaweb.uhc.com
concurtest.unitedhealthgroup.com
ssopacorp2extra-stg.uhg.com
www-stage-tmp.unitedhealthgroup.com
authgateway3.entiam.uhg.com
careers-stg.unitedhealthgroup.com
globalselfservice.unitedhealthgroup.com
authgateway3.entiam.uhg.com
concurtest.unitedhealthgroup.com
e1099.unitedhealthgroup.com
globalselfservice-gw.unitedhealthgroup.com
e1099.unitedhealthgroup.com
www-2018.unitedhealthgroup.com
careers-dev.unitedhealthgroup.com
hub.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
e1099.unitedhealthgroup.com
federatedr.uhg.com
aa-selfservice-stage.unitedhealthgroup.com
www.unitedhealthgroup.com
odplms-stg.unitedhealthgroup.com
egrc-portal.unitedhealthgroup.com
hrdirectstage.unitedhealthgroup.com
signontest.unitedhealthgroup.com
ssoiamextra.uhg.com
sso.uhg.com
ssoiamextra-stg.uhg.com
signontest.unitedhealthgroup.com
careers.unitedhealthgroup.com
stage-sso.uhg.com
globalselfservice-elr.unitedhealthgroup.com
egrc.unitedhealthgroup.com
ssoi.uhg.com
odplmsstg.unitedhealthgroup.com
aem.optum.com
careers-tst.unitedhealthgroup.com
globalselfservice.unitedhealthgroup.com
aem.optum.com
signon.unitedhealthgroup.com
odplms.unitedhealthgroup.com
careers.unitedhealthgroup.com
sso.uhg.com
signon.unitedhealthgroup.com
authgateway3.entiam.uhg.com
www-2019.unitedhealthgroup.com
sso.uhg.com
aa-selfservice.unitedhealthgroup.com
learnsourcetmp.unitedhealthgroup.com
egrc.unitedhealthgroup.com
www-stage-tmp.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
signon.unitedhealthgroup.com
concurtest.unitedhealthgroup.com
aaweb-stage.uhc.com
signontest.unitedhealthgroup.com
globalselfservice-elr.unitedhealthgroup.com
odplms.unitedhealthgroup.com
federate.uhg.com
concur.unitedhealthgroup.com
referrals.unitedhealthgroup.com
authgateway3-stg.entiam.uhg.com
unitedhealthgroup.com
referrals.unitedhealthgroup.com
aaweb-stage.uhc.com
ediscovery.unitedhealthgroup.com
federatedr.uhg.com
careers-dev.unitedhealthgroup.com
www-2019.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
www-2019.unitedhealthgroup.com
dvprod.optum.com
stage-ssoi.uhg.com
careers-test.unitedhealthgroup.com
lmscontentstg.unitedhealthgroup.com
aaweb-stage.uhc.com
learnsource-gw.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
ssoi.uhg.com
careers.unitedhealthgroup.com
concur.unitedhealthgroup.com
rmsearch.unitedhealthgroup.com
concur.unitedhealthgroup.com
dvprod.optum.com
learnsource-ma-stage.unitedhealthgroup.com
odplms.unitedhealthgroup.com
www-stg-ctc.unitedhealthgroup.com
globalselfservicestg.unitedhealthgroup.com
selfservicestg.unitedhealthgroup.com
uhcathome.com

Certificate

The complete raw certificate details for globalselfservice.unitedhealthgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Pvv1+9rSsuZOWEkd1C
GYxl5XDqzLDFRYY9wM8ZYZri9YYZxbQs8gpaeZJMoSLPkEwQnQf/CfB8Dwy8XMV0
fo3pXqgQOuuZn+6bXT31Qrxp/gf1JGTNyUVV1udIuGRS9fuwFn//HPFJZhW/aIh8
n7jEpfaTk9vv/twQDmM8jdjutYHqTiOGNAbwLXr4gp9cgvxa14LGX+Xh8LtgJ3ee
hD/WCqNmHhpSV2RT8C902Ys9izf4RN1p2VwUdHOXNstJEmJKMWexsLt1S4Nxox0A
OU7z9of2J17ony9a8OD2Pq9NiTB3cTCO+HAwYwJApg4F80h9LuGLyQaq8auShYwY
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322805833742874035330589326205748801030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globalselfservice.unitedhealthgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705375759002725639607370456636128838083759696335834359866933191616349394991475222691848579251681254497161504698376143782604510290617751926639572635651635034148916503042154702921012833189410585618874665504932826413715471942160702634832082827937625566153056229186073314565056567098114300549245564794705339185303994410534071242349015543921457587248322472352743989609870871806933315431850884747317967004952804619182362866366214708770162060464588277815705880398307475611212006457426096976080207825317992090573294553768970740552769669931924213166076405389257932839388910794002012796117526508370998271001668219723125102831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfc841fc6fc074a99b05da0ffc8ed51b7934ed94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000171a568d47d000004030047304502202b4ec9db5b0ed857fe354e5e0ed4a06b46624af3bcb286e39346b11b86be90da022100b6dd4dd807df2d4797081d1ab8edf2caaf53f29fcd3b49ee7fe4a9b57cf718dc0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000171a568d5d2000004030046304402206248b1657c89665a44c68d28d2cde99b25a86bfcae46474c0335702325e7809402200efbb562beeeb17e4bb3d6e542c9b24ad903f31f20dd3a11cb13461086a1ba01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalselfservice.unitedhealthgroup.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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