test3.healthcare.gov
- Centers for Medicare & Medicaid Services -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 04:2d:ee:e6:3e:66:2c:97:f6:bc:f6:ef:e8:1d:5a:6a was issued on by DigiCert Inc.
With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Centers for Medicare & Medicaid Services
Organization:
Centers for Medicare & Medicaid Services
Organization unit: OIS
Organization unit: OIS
State / Province:
Maryland
Locality: Windsor Mill
Country: US
Locality: Windsor Mill
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2d:ee:e6:3e:66:2c:97:f6:bc:f6:ef:e8:1d:5a:6aSerial Number (int): 5555410797048369743144691307342813802
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a4:c3:6f:e4:7f:3f:60:f3:06:91:68:5c:ba:16:a1:87:b8:2d:e0:ac
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 8b:b8:55:a4:70:40:2f:a6:ac:fb:f2:6c:9f:38:9d:2d:af:78:7f:5e
Fingerprint (sha256): 14:4a:dd:86:6a:7f:d6:e6:3d:22:59:10:bd:a9:39:ca:47:0e:01:ba:ce:fe:d9:99:1d:1a:2e:bb:7b:84:d7:22
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate test3.healthcare.gov
50
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test3.healthcare.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test3.healthcare.gov
aws-impl2.cuidadodesalud.gov
test1.dsrs.api.healthcare.gov
aws-test0.cuidadodesalud.gov
chat.uat.healthcare.gov
test0.ses.api.healthcare.gov
uat0.healthcare.gov
impl.ses.api.healthcare.gov
testpe.ses.api.healthcare.gov
aws-test2.cuidadodesalud.gov
impl2.ses.api.healthcare.gov
testpe1.dsrs.api.healthcare.gov
chat.test.healthcare.gov
aws-impl0.healthcare.gov
aws-test3.healthcare.gov
testpe1.ses.api.healthcare.gov
uat0.dsrs.api.healthcare.gov
aws-test2.healthcare.gov
impl1b.ses.api.healthcare.gov
test6.cuidadodesalud.gov
dev2.ses.api.healthcare.gov
dev1.ses.api.healthcare.gov
test4.ses.api.healthcare.gov
aws-impl1b.healthcare.gov
test4.healthcare.gov
test3.ses.api.healthcare.gov
aws-test0.healthcare.gov
test5.healthcare.gov
aws-test3.cuidadodesalud.gov
impl1a.ses.api.healthcare.gov
test2.dsrs.api.healthcare.gov
test4.cuidadodesalud.gov
uat0.cuidadodesalud.gov
test3.dsrs.api.healthcare.gov
aws-impl2.healthcare.gov
aws-impl1b.cuidadodesalud.gov
impl2.dsrs.api.healthcare.gov
test6.healthcare.gov
chat.funtest.healthcare.gov
sls-app.test1.healthcare.gov
sls-app.uat0.healthcare.gov
impl1a.dsrs.api.healthcare.gov
uat0.mcr.api.healthcare.gov
test2.ses.api.healthcare.gov
uat0.ses.api.healthcare.gov
testpe1.mcr.api.healthcare.gov
dev0.ses.api.healthcare.gov
test5.cuidadodesalud.gov
test1.ses.api.healthcare.gov
aws-impl0.cuidadodesalud.gov
aws-impl2.cuidadodesalud.gov
test1.dsrs.api.healthcare.gov
aws-test0.cuidadodesalud.gov
chat.uat.healthcare.gov
test0.ses.api.healthcare.gov
uat0.healthcare.gov
impl.ses.api.healthcare.gov
testpe.ses.api.healthcare.gov
aws-test2.cuidadodesalud.gov
impl2.ses.api.healthcare.gov
testpe1.dsrs.api.healthcare.gov
chat.test.healthcare.gov
aws-impl0.healthcare.gov
aws-test3.healthcare.gov
testpe1.ses.api.healthcare.gov
uat0.dsrs.api.healthcare.gov
aws-test2.healthcare.gov
impl1b.ses.api.healthcare.gov
test6.cuidadodesalud.gov
dev2.ses.api.healthcare.gov
dev1.ses.api.healthcare.gov
test4.ses.api.healthcare.gov
aws-impl1b.healthcare.gov
test4.healthcare.gov
test3.ses.api.healthcare.gov
aws-test0.healthcare.gov
test5.healthcare.gov
aws-test3.cuidadodesalud.gov
impl1a.ses.api.healthcare.gov
test2.dsrs.api.healthcare.gov
test4.cuidadodesalud.gov
uat0.cuidadodesalud.gov
test3.dsrs.api.healthcare.gov
aws-impl2.healthcare.gov
aws-impl1b.cuidadodesalud.gov
impl2.dsrs.api.healthcare.gov
test6.healthcare.gov
chat.funtest.healthcare.gov
sls-app.test1.healthcare.gov
sls-app.uat0.healthcare.gov
impl1a.dsrs.api.healthcare.gov
uat0.mcr.api.healthcare.gov
test2.ses.api.healthcare.gov
uat0.ses.api.healthcare.gov
testpe1.mcr.api.healthcare.gov
dev0.ses.api.healthcare.gov
test5.cuidadodesalud.gov
test1.ses.api.healthcare.gov
aws-impl0.cuidadodesalud.gov
Other certificates including the domain name healthcare.gov
(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
Certificate
The complete raw certificate details for test3.healthcare.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIK2TCCCcGgAwIBAgIQBC3u5j5mLJf2vPbv6B1aajANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMjEwMDAwMDAwWhcN MjAwMzEwMTIwMDAwWjCBlzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE1hcnlsYW5k MRUwEwYDVQQHEwxXaW5kc29yIE1pbGwxMTAvBgNVBAoMKENlbnRlcnMgZm9yIE1l ZGljYXJlICYgTWVkaWNhaWQgU2VydmljZXMxDDAKBgNVBAsTA09JUzEdMBsGA1UE AxMUdGVzdDMuaGVhbHRoY2FyZS5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCvTm3wbWLFisLNXD1M59Mo7zaNS+QjzL7QuXPUERNZTO5UErKCh85W smCYvp97Zpzx7i6+y0/z7/RaoCLEaSIwVvdWZ6/M5DhOGmBJgG2BMge7PXxCKi03 Q7eS4SRzhCPYFAflng+9KAog086iDTggFNXvGTO2Wqw1cPb7oEnK7YC1oqkFMenR RNSxiVQPT59xdd+jtDSvWdYpDQ/f4LiCRtwfR/qvuCnjgKhPxvYNpqCyd4FZsgba UTj0l+x6An092Ncpj6GP2zbZ3obYIQIw1WMlVwqEj/6jpyrPuvB9BpTxfLwgneVW 5hTdrBGJeVCX+wLujcc81mT6NXelNqqLAgMBAAGjggdoMIIHZDAfBgNVHSMEGDAW gBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUpMNv5H8/YPMGkWhcuhah h7gt4KwwggWYBgNVHREEggWPMIIFi4IUdGVzdDMuaGVhbHRoY2FyZS5nb3aCHGF3 cy1pbXBsMi5jdWlkYWRvZGVzYWx1ZC5nb3aCHXRlc3QxLmRzcnMuYXBpLmhlYWx0 aGNhcmUuZ292ghxhd3MtdGVzdDAuY3VpZGFkb2Rlc2FsdWQuZ292ghdjaGF0LnVh dC5oZWFsdGhjYXJlLmdvdoIcdGVzdDAuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIT dWF0MC5oZWFsdGhjYXJlLmdvdoIbaW1wbC5zZXMuYXBpLmhlYWx0aGNhcmUuZ292 gh10ZXN0cGUuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIcYXdzLXRlc3QyLmN1aWRh ZG9kZXNhbHVkLmdvdoIcaW1wbDIuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIfdGVz dHBlMS5kc3JzLmFwaS5oZWFsdGhjYXJlLmdvdoIYY2hhdC50ZXN0LmhlYWx0aGNh cmUuZ292ghhhd3MtaW1wbDAuaGVhbHRoY2FyZS5nb3aCGGF3cy10ZXN0My5oZWFs dGhjYXJlLmdvdoIedGVzdHBlMS5zZXMuYXBpLmhlYWx0aGNhcmUuZ292ghx1YXQw LmRzcnMuYXBpLmhlYWx0aGNhcmUuZ292ghhhd3MtdGVzdDIuaGVhbHRoY2FyZS5n b3aCHWltcGwxYi5zZXMuYXBpLmhlYWx0aGNhcmUuZ292ghh0ZXN0Ni5jdWlkYWRv ZGVzYWx1ZC5nb3aCG2RldjIuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIbZGV2MS5z ZXMuYXBpLmhlYWx0aGNhcmUuZ292ghx0ZXN0NC5zZXMuYXBpLmhlYWx0aGNhcmUu Z292ghlhd3MtaW1wbDFiLmhlYWx0aGNhcmUuZ292ghR0ZXN0NC5oZWFsdGhjYXJl LmdvdoIcdGVzdDMuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIYYXdzLXRlc3QwLmhl YWx0aGNhcmUuZ292ghR0ZXN0NS5oZWFsdGhjYXJlLmdvdoIcYXdzLXRlc3QzLmN1 aWRhZG9kZXNhbHVkLmdvdoIdaW1wbDFhLnNlcy5hcGkuaGVhbHRoY2FyZS5nb3aC HXRlc3QyLmRzcnMuYXBpLmhlYWx0aGNhcmUuZ292ghh0ZXN0NC5jdWlkYWRvZGVz YWx1ZC5nb3aCF3VhdDAuY3VpZGFkb2Rlc2FsdWQuZ292gh10ZXN0My5kc3JzLmFw aS5oZWFsdGhjYXJlLmdvdoIYYXdzLWltcGwyLmhlYWx0aGNhcmUuZ292gh1hd3Mt aW1wbDFiLmN1aWRhZG9kZXNhbHVkLmdvdoIdaW1wbDIuZHNycy5hcGkuaGVhbHRo Y2FyZS5nb3aCFHRlc3Q2LmhlYWx0aGNhcmUuZ292ghtjaGF0LmZ1bnRlc3QuaGVh bHRoY2FyZS5nb3aCHHNscy1hcHAudGVzdDEuaGVhbHRoY2FyZS5nb3aCG3Nscy1h cHAudWF0MC5oZWFsdGhjYXJlLmdvdoIeaW1wbDFhLmRzcnMuYXBpLmhlYWx0aGNh cmUuZ292ght1YXQwLm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCHHRlc3QyLnNlcy5h cGkuaGVhbHRoY2FyZS5nb3aCG3VhdDAuc2VzLmFwaS5oZWFsdGhjYXJlLmdvdoIe dGVzdHBlMS5tY3IuYXBpLmhlYWx0aGNhcmUuZ292ghtkZXYwLnNlcy5hcGkuaGVh bHRoY2FyZS5nb3aCGHRlc3Q1LmN1aWRhZG9kZXNhbHVkLmdvdoIcdGVzdDEuc2Vz LmFwaS5oZWFsdGhjYXJlLmdvdoIcYXdzLWltcGwwLmN1aWRhZG9kZXNhbHVkLmdv djAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2Nh LXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3Nj YS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8Bggr BgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv bTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC85UvcUxx3pP2zLVHxIjPiypmV n6nhSieLU82EC9ps2SzhMmEXihtcU2a26Moths86zI8ZrSXkfSvhx3V4lDgJ8Q2u 9bqTP8gHwBbRwo8HMhM6OfJ52KcIaSNgn/jeuILcgndhlLZgTuuTHM01S3PGP+95 HnQh3HFo1TrrzyfGTMpM69CsCQb7T0iYu1XH/M/G+z0gKOagoRdqKysUce54g9tz 6SliGpZfLyZ8ZpaG66fQc4YwK8as9/fdtFvzo4lK7XQ/8ebu7aNV7XQvVRSMcPjF EvQKUEkdHLQhII/v9WoTgyCf6X7Pm5RfZQVZJoC5L/uG9cafXx4Yvmn3FOOX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr05t8G1ixYrCzVw9TOfT KO82jUvkI8y+0Llz1BETWUzuVBKygofOVrJgmL6fe2ac8e4uvstP8+/0WqAixGki MFb3VmevzOQ4ThpgSYBtgTIHuz18QiotN0O3kuEkc4Qj2BQH5Z4PvSgKINPOog04 IBTV7xkztlqsNXD2+6BJyu2AtaKpBTHp0UTUsYlUD0+fcXXfo7Q0r1nWKQ0P3+C4 gkbcH0f6r7gp44CoT8b2DaagsneBWbIG2lE49JfsegJ9PdjXKY+hj9s22d6G2CEC MNVjJVcKhI/+o6cqz7rwfQaU8Xy8IJ3lVuYU3awRiXlQl/sC7o3HPNZk+jV3pTaq iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5555410797048369743144691307342813802 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Windsor Mill' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Medicare & Medicaid Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test3.healthcare.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22130378372232839168725455430632968770225064740263569206244484737209620031996476620670545168075792639679183576156279962801402784036012540908817306384893856017465020035035894394855492853385265182670993721767503158561886286122549997590571887943732855205803778076643843306683827188659867988591610631713907634263077873364136193402942853470964599660319567194773501843051646352042209442696358375447274149017576904253615585848861444715031063885840412104809110743457270908949986526211127650477466959344731526891158933130843876868271765903483435029426771065988006262971191692896218198910721539789606107910600600126044570561163 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4c36fe47f3f60f30691685cba16a187b82de0ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1423 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test0.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.uat.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl0.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test3.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1b.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test0.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test3.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1b.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.funtest.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sls-app.test1.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sls-app.uat0.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat0.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev0.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ses.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl0.cuidadodesalud.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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