aem.optum.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 7e:19:a3:f3:b6:e6:b2:64:35:aa:83:b6:7f:d5:a6:96 was issued on by COMODO CA Limited.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Multi-Domain SSL
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:19:a3:f3:b6:e6:b2:64:35:aa:83:b6:7f:d5:a6:96
Serial Number (int): 167615860232176824020877664072492230294
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1e:24:7d:67:7a:29:ea:b2:96:6b:f2:b4:ad:19:49:92:d8:50:d4:43
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): f3:b8:19:cc:8a:ee:5b:ac:e7:ef:96:bc:6f:06:13:b4:79:5c:98:da
Fingerprint (sha256): 14:47:78:54:9d:33:61:50:cd:db:de:26:f2:2f:79:75:c6:93:aa:bd:62:a4:a2:3c:7c:3d:87:3b:64:b2:ae:8a

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate aem.optum.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aem.optum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aem.optum.com
360training.optum.com
accesshealthfirst.com
ace.providerexpress.com
adminresources.uhcfinancialprotection.com
advantageenrollment123.com
aem-ctc.optum.com
aem-elr.optum.com
asdjourney.uhc.com
bassprobenefits.uhc.com
breakerslife.com
care.uhc.com
centurylinkbackpain.uhc.com
clinicalguidelines.optum.com
clinicalguidelines.pronouncedhealth.com
clinicalguides.pronouncedhealth.com
cx.optum.com
cx.uhc.com
deltahealthdirect.com
eaporientation.optum.com
eohs.unitedhealthgroup.com
hellobenefitsuhc.com
here4tn.com
ipghrhub.uhc.com
learn.optumrx.com
m.uhclatino.com
makerspace.optum.com
marketingcloud.optum.com
myblueprint4health.com
mycdh123.com
myuhclifeanddisability.com
myuhcspecialtybenefits.com
onesmallstep.org.uk
openenrollment123.com
optummarketingcloud.com
optumwallet123.optum.com
piercebho.optum.com
rally.myuhc.com
targetresources.uhc.com
toolkit.ytth.com
uhccommunityplankiosks.com
uhcfinancialprotection.com
uhclatino.com
unimerica.com
unimericaonline.com
vitasrewards.uhc.com
welcome.optum.com
welcome.optum360.com
welcome.optumcare.com
welcome.uhc.com
welcome.uhg.com
wellatwork.uhc.com
www.accesshealthfirst.com
www.adminresources.uhcfinancialprotection.com
www.advantageenrollment123.com
www.breakerslife.com
www.cx.optum.com
www.cx.uhc.com
www.deltahealthdirect.com
www.hellobenefitsuhc.com
www.here4tn.com
www.myblueprint4health.com
www.mycdh123.com
www.myuhclifeanddisability.com
www.myuhcspecialtybenefits.com
www.onesmallstep.org.uk
www.openenrollment123.com
www.optummarketingcloud.com
www.uhccommunityplankiosks.com
www.uhcfinancialprotection.com
www.uhclatino.com
www.unimerica.com
www.unimericaonline.com

Other certificates including the domain name optum.com

(limited to 100 certificates)
rxanalytics.optum.com
edi-278inq-master.optum.com
kpsuniversalofe.optum.com
login.agentmessagecenter-stage.optum.com
test-ecp-ui-external-backend.optum.com
ie-wv-cm-dev.optum.com
wvie-admin.optum.com
ssopacorp-ctc-dev.uhg.com
ols-tableau-azure-e2-prd.optum.com
service-now-auth-stage.optum.com
sps-stage.optum.com
reco-a1507b3a.optum.com
cert00047-azurecdn.akamaized.net
epro.dev-eastus2.cs-np.o360.cloud
uho-tranzform.uhc.com
ie-pp-dev.optum.com
test-oc-mms.optum.com
myworkbench.optum.com
ma-appeal.optum.com
niv.optum.com
cert00022-azurecdn.akamaized.net
reco-657aae2c.optum.com
wsstg-healthid.optum.com
wem.uhc.com
stg-procare.optum.com
fulfillmentservices-optumclinic.optum.com
apimgr4.optum.com
reco-c3b1c36d.optum.com
prdasp-providerportal.optum.com
apimgr4.optum.com
irislite-uat.optum.com
superhero-stg.optum.com
stgfulfillmentservices-cpm.optum.com
reg1devacet.optum.com
edge-preferredone-stage.optum.com
healthid.optum.com
careers-test.unitedhealthgroup.com
wvie-provider-dtc.optum.com
prd-mtwc.optum.com
reco-1f025aa5.optum.com
stg-etg.optum.com
reco-dev.optum.com
cert00047-azurecdn.akamaized.net
azsp.optum.com
sps.optum.com
ie-clientportal-stg1.optum.com
impactintelligence.optum.com
securityplatform-stage.optum.com
appmgr-dev.linkhealth.com
reco-0c3ffee1.optum.com
ols-tableau-azure-e2-tst.optum.com
prdirx-rxview.optum.com
phow-stg-services.optum.com
reco-2d6c8103.optum.com
api8.optum.com
image.partnerapp1.myworld.com
ltmelrstgcorp1.uhc.com
cert00007-azurecdn.akamaized.net
directconnect.optum.com
airflow.bahubali.cdml-dev.optum.com
ngis-bsm.optum.com
prod-oc360.optum.com
ssopacorp2extra-dev.uhg.com
edi-274prvdirinfo-bravo3.optum.com
reco-f966bf9d.optum.com
edge-fbhealthplans-stage.optum.com
apsrp1660.uhc.com
apimgr4-stg.optum.com
reco-a0f5ea66.optum.com
demo-oidc.stepwise.optum.com
hive.hcp.uhg.com
grafana.pr-2.hcc-pr.optum.com
trn-optumcare.optum.com
rxdoc.optum.com
cert00007-azurecdn.akamaized.net
rqns-tableau-stg.optum.com
optumcollaborate-edi.optum.com
oireportsstage.optuminsight.com
orxapi.optum.com
ssopacorp-elr-dev.uhg.com
phish.optum.com
stageoptumparallax.optum.com
securityplatform-dev.optum.com
omms-pe-mt.optum.com
link-stage.optum.com
myxstage.optum.com
ees-stage3.optum.com
xcm-nonprod.optum.com
reco-2d6c8103.optum.com
upmccws-test2.optum.com
familydashboard.optum.com
healthstate-stg.optum.com
sr-saml-stg.liveandworkwell.com
iirp-demo.optum.com
provider-networks-k8s-dev.optum.com
hive.hcp.uhg.com
mnl.status.cloudsigma.com
cert00022-azurecdn.akamaized.net
prdasp-providerportal.optum.com
cert00047-azurecdn.akamaized.net

Certificate

The complete raw certificate details for aem.optum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IDZxjs+RPETYnfGWIlY
L0dewWQhnFMZ5Ct/QBBNARVpJkC4xZhCfV9S9/Z90bD9FRsNO9aK9FQg+R3MBglE
ZeR/7W5UvHKP6kqm6R9ow2krwIEXeTYgrXGu8ahAywC0XKiXbi6Iw2OqZVzuBAPJ
jdXzQmqXExGvtr6WAjy/Patf7db7mCdiEZvou+wTpg3Jt8auTxs5/3hhFOWl7uAB
3cPLFK3ye8nUt8z5fkFFUbfhw36IMNvlfvmuqH9ulcrq4K6GYJcCTxLBBeeJUf7H
63eba2X3IsmUz2SV8R4LSvzlHRV+1GDp5CCsn+gMmWl/qSD202lonOx5osik0/cs
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167615860232176824020877664072492230294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aem.optum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28845872171190524746861095007613470473315705643050007628288477832317578386970567773568130633715367993482417963034688083194766049522142058914892235245895034059158820428932901453232816909160944213611545297129943026529797957368147900813065740802573254967026748052778937897047548439949011710823177667592821625097418634398645069637541618287561875653399179876130977826865548326378575885468590760632680193069541551162436432562410015511856063668892335307863511132089019474560706895221434592596070058480105884441863067667476052633077422322990845279034492210494084741628281002692066454598130399900897512333219376196426566937841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e247d677a29eab2966bf2b4ad194992d850d443
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1720 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360training.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesshealthfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.providerexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminresources.uhcfinancialprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageenrollment123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-ctc.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-elr.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdjourney.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassprobenefits.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurylinkbackpain.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalguidelines.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalguidelines.pronouncedhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalguides.pronouncedhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cx.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cx.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltahealthdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaporientation.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eohs.unitedhealthgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellobenefitsuhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'here4tn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipghrhub.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.optumrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.uhclatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makerspace.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingcloud.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myblueprint4health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycdh123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myuhclifeanddisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myuhcspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesmallstep.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openenrollment123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optummarketingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optumwallet123.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piercebho.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rally.myuhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetresources.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolkit.ytth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhccommunityplankiosks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhcfinancialprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhclatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimericaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitasrewards.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.optum360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.optumcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.uhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellatwork.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accesshealthfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adminresources.uhcfinancialprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageenrollment123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cx.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cx.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltahealthdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellobenefitsuhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.here4tn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myblueprint4health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycdh123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myuhclifeanddisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myuhcspecialtybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onesmallstep.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openenrollment123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optummarketingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhccommunityplankiosks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhcfinancialprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhclatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimericaonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e726152d900000403004630440220381a3aa3549f0395948ea72e6665233150f18dc1fafc7225a4c2f9585a38e1b8022030ddf0f80455460935df3770cca9adf000a1fe1826b720da9191db286b30c4c70075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e726152c3000004030046304402207ac39cb013a7843d425f8a6c9b1310fce0e3ad664f0ddf9be43f6c3217d04ff802202ca3dac7613a7879810ac6b90d4387ebbf52219ace7e2697d77ba5685b1da8a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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