test2.healthcare.gov
- Centers for Medicare & Medicaid Services -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 05:75:b1:ea:04:c1:b8:3c:64:33:fd:44:ba:e4:fa:29 was issued on by DigiCert Inc.
With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Centers for Medicare & Medicaid Services
Organization:
Centers for Medicare & Medicaid Services
Organization unit: OIS
Organization unit: OIS
State / Province:
Maryland
Locality: Windsor Mill
Country: US
Locality: Windsor Mill
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:75:b1:ea:04:c1:b8:3c:64:33:fd:44:ba:e4:fa:29Serial Number (int): 7257247238735161632506028166832519721
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 73:7b:ba:3f:93:76:c0:9d:39:2a:50:1c:f9:33:2f:59:d6:f5:b0:61
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 82:c9:5f:a1:18:7b:43:ef:ea:bc:22:0c:bc:95:31:e0:3a:de:f1:35
Fingerprint (sha256): 18:96:be:0a:0a:91:78:ca:a3:e5:3a:d2:c5:2e:b9:5f:2f:9b:05:57:31:69:d3:f5:77:a5:d9:24:48:1e:ee:2c
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate test2.healthcare.gov
46
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test2.healthcare.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test2.healthcare.gov
ratereview.dev.healthcare.gov
imp.marketplace-int.api.healthcare.gov
test0.eeshop.healthcare.gov
imp.marketplace.api.healthcare.gov
prod.ee.cuidadodesalud.gov
test1.mcr.api.healthcare.gov
test.geo.api.healthcare.gov
ratereview.test.healthcare.gov
imp1a.marketplace.api.healthcare.gov
test-t.healthcare.gov
test0.dsrs.api.healthcare.gov
imp-t.healthcare.gov
prod-t.healthcare.gov
testpe.mcr.api.healthcare.gov
dev.marketplace.api.healthcare.gov
impl2.mcr.api.healthcare.gov
impl1b.mcr.api.healthcare.gov
finder.hotfix.healthcare.gov
prod.ee.healthcare.gov
impl1a.mcr.api.healthcare.gov
ratereview.imp.healthcare.gov
test.marketplace.api.healthcare.gov
impl1b.dsrs.api.healthcare.gov
test0.eeshop.cuidadodesalud.gov
test.aca.api.healthcare.gov
imp.geo.api.healthcare.gov
test0.ee.cuidadodesalud.gov
dev.marketplace-int.api.healthcare.gov
companyprofiles.hotfix.healthcare.gov
test1.ee.cuidadodesalud.gov
test.mcr.api.healthcare.gov
testpe.dsrs.api.healthcare.gov
test1.ee.healthcare.gov
dev-t.healthcare.gov
imp2.geo.api.healthcare.gov
api.finder.hotfix.healthcare.gov
ratereview.hotfix.healthcare.gov
impl.mcr.api.healthcare.gov
test0.ee.healthcare.gov
imp1b.marketplace.api.healthcare.gov
impl0.dsrs.api.healthcare.gov
imp.billing.healthcare.gov
test2.mcr.api.healthcare.gov
dev.geo.api.healthcare.gov
test.marketplace-int.api.healthcare.gov
ratereview.dev.healthcare.gov
imp.marketplace-int.api.healthcare.gov
test0.eeshop.healthcare.gov
imp.marketplace.api.healthcare.gov
prod.ee.cuidadodesalud.gov
test1.mcr.api.healthcare.gov
test.geo.api.healthcare.gov
ratereview.test.healthcare.gov
imp1a.marketplace.api.healthcare.gov
test-t.healthcare.gov
test0.dsrs.api.healthcare.gov
imp-t.healthcare.gov
prod-t.healthcare.gov
testpe.mcr.api.healthcare.gov
dev.marketplace.api.healthcare.gov
impl2.mcr.api.healthcare.gov
impl1b.mcr.api.healthcare.gov
finder.hotfix.healthcare.gov
prod.ee.healthcare.gov
impl1a.mcr.api.healthcare.gov
ratereview.imp.healthcare.gov
test.marketplace.api.healthcare.gov
impl1b.dsrs.api.healthcare.gov
test0.eeshop.cuidadodesalud.gov
test.aca.api.healthcare.gov
imp.geo.api.healthcare.gov
test0.ee.cuidadodesalud.gov
dev.marketplace-int.api.healthcare.gov
companyprofiles.hotfix.healthcare.gov
test1.ee.cuidadodesalud.gov
test.mcr.api.healthcare.gov
testpe.dsrs.api.healthcare.gov
test1.ee.healthcare.gov
dev-t.healthcare.gov
imp2.geo.api.healthcare.gov
api.finder.hotfix.healthcare.gov
ratereview.hotfix.healthcare.gov
impl.mcr.api.healthcare.gov
test0.ee.healthcare.gov
imp1b.marketplace.api.healthcare.gov
impl0.dsrs.api.healthcare.gov
imp.billing.healthcare.gov
test2.mcr.api.healthcare.gov
dev.geo.api.healthcare.gov
test.marketplace-int.api.healthcare.gov
Other certificates including the domain name healthcare.gov
(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
Certificate
The complete raw certificate details for test2.healthcare.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILnjCCCoagAwIBAgIQBXWx6gTBuDxkM/1EuuT6KTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODAzMTIwMDAwMDBaFw0xODEyMTQxMjAwMDBaMIGXMQswCQYDVQQGEwJVUzER MA8GA1UECBMITWFyeWxhbmQxFTATBgNVBAcTDFdpbmRzb3IgTWlsbDExMC8GA1UE CgwoQ2VudGVycyBmb3IgTWVkaWNhcmUgJiBNZWRpY2FpZCBTZXJ2aWNlczEMMAoG A1UECxMDT0lTMR0wGwYDVQQDExR0ZXN0Mi5oZWFsdGhjYXJlLmdvdjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANZl2PCUJZ/ILLDPMoN5Oit3iwG8gdyu jX/Zvn0MmqJQjc2+QCTIEIbYQ0dODssDHLPu3oOg2VvwICdcMw9NXq67H+CbqYn+ 0padEhhsOSBy1zmFk3JkPggP/1W8d61ry9/k5EBA7H28GxFWNVec8zTP9b3kEaCg hlJxwRK5qDYW9Gw24vpAfhjs4bCudd+RGHMvl5th5WMOGFKtHmUOZJf1XME1chtl S5CSyAj/e5sVsa2d7gc9IPJrusReCKxIsNh6eaBT4bmt4PH2VxXyhaLcT8LdVQq/ STUN2xGTBbabcdRUBvByhWPoshhun0/Yyaxfl1jhUvlaUdYoJCEPCZ0CAwEAAaOC CBwwgggYMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQW BBRze7o/k3bAnTkqUBz5My9Z1vWwYTCCBY4GA1UdEQSCBYUwggWBghR0ZXN0Mi5o ZWFsdGhjYXJlLmdvdoIdcmF0ZXJldmlldy5kZXYuaGVhbHRoY2FyZS5nb3aCJmlt cC5tYXJrZXRwbGFjZS1pbnQuYXBpLmhlYWx0aGNhcmUuZ292ght0ZXN0MC5lZXNo b3AuaGVhbHRoY2FyZS5nb3aCImltcC5tYXJrZXRwbGFjZS5hcGkuaGVhbHRoY2Fy ZS5nb3aCGnByb2QuZWUuY3VpZGFkb2Rlc2FsdWQuZ292ghx0ZXN0MS5tY3IuYXBp LmhlYWx0aGNhcmUuZ292ght0ZXN0Lmdlby5hcGkuaGVhbHRoY2FyZS5nb3aCHnJh dGVyZXZpZXcudGVzdC5oZWFsdGhjYXJlLmdvdoIkaW1wMWEubWFya2V0cGxhY2Uu YXBpLmhlYWx0aGNhcmUuZ292ghV0ZXN0LXQuaGVhbHRoY2FyZS5nb3aCHXRlc3Qw LmRzcnMuYXBpLmhlYWx0aGNhcmUuZ292ghRpbXAtdC5oZWFsdGhjYXJlLmdvdoIV cHJvZC10LmhlYWx0aGNhcmUuZ292gh10ZXN0cGUubWNyLmFwaS5oZWFsdGhjYXJl LmdvdoIiZGV2Lm1hcmtldHBsYWNlLmFwaS5oZWFsdGhjYXJlLmdvdoIcaW1wbDIu bWNyLmFwaS5oZWFsdGhjYXJlLmdvdoIdaW1wbDFiLm1jci5hcGkuaGVhbHRoY2Fy ZS5nb3aCHGZpbmRlci5ob3RmaXguaGVhbHRoY2FyZS5nb3aCFnByb2QuZWUuaGVh bHRoY2FyZS5nb3aCHWltcGwxYS5tY3IuYXBpLmhlYWx0aGNhcmUuZ292gh1yYXRl cmV2aWV3LmltcC5oZWFsdGhjYXJlLmdvdoIjdGVzdC5tYXJrZXRwbGFjZS5hcGku aGVhbHRoY2FyZS5nb3aCHmltcGwxYi5kc3JzLmFwaS5oZWFsdGhjYXJlLmdvdoIf dGVzdDAuZWVzaG9wLmN1aWRhZG9kZXNhbHVkLmdvdoIbdGVzdC5hY2EuYXBpLmhl YWx0aGNhcmUuZ292ghppbXAuZ2VvLmFwaS5oZWFsdGhjYXJlLmdvdoIbdGVzdDAu ZWUuY3VpZGFkb2Rlc2FsdWQuZ292giZkZXYubWFya2V0cGxhY2UtaW50LmFwaS5o ZWFsdGhjYXJlLmdvdoIlY29tcGFueXByb2ZpbGVzLmhvdGZpeC5oZWFsdGhjYXJl LmdvdoIbdGVzdDEuZWUuY3VpZGFkb2Rlc2FsdWQuZ292ght0ZXN0Lm1jci5hcGku aGVhbHRoY2FyZS5nb3aCHnRlc3RwZS5kc3JzLmFwaS5oZWFsdGhjYXJlLmdvdoIX dGVzdDEuZWUuaGVhbHRoY2FyZS5nb3aCFGRldi10LmhlYWx0aGNhcmUuZ292ghtp bXAyLmdlby5hcGkuaGVhbHRoY2FyZS5nb3aCIGFwaS5maW5kZXIuaG90Zml4Lmhl YWx0aGNhcmUuZ292giByYXRlcmV2aWV3LmhvdGZpeC5oZWFsdGhjYXJlLmdvdoIb aW1wbC5tY3IuYXBpLmhlYWx0aGNhcmUuZ292ghd0ZXN0MC5lZS5oZWFsdGhjYXJl LmdvdoIkaW1wMWIubWFya2V0cGxhY2UuYXBpLmhlYWx0aGNhcmUuZ292gh1pbXBs MC5kc3JzLmFwaS5oZWFsdGhjYXJlLmdvdoIaaW1wLmJpbGxpbmcuaGVhbHRoY2Fy ZS5nb3aCHHRlc3QyLm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCGmRldi5nZW8uYXBp LmhlYWx0aGNhcmUuZ292gid0ZXN0Lm1hcmtldHBsYWNlLWludC5hcGkuaGVhbHRo Y2FyZS5nb3YwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNv bS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEw KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn gQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz Lmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1 c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN 3BAAAAFiG8v2DQAABAMARjBEAiBdp76k3ry8r6oCco24gKM5KjBszffsp8cfbtEF VvuegAIgWi/uGcGaZlpCiiYUr3FKdZN2RoJzscjR1b1zI51UFvwAdgBvU3asMfAx GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWIby/d3AAAEAwBHMEUCIQDajfre fMtGzFFN3qWCMNK8uDiVoMeJLid9+/d1YkhiUQIgZ4M6rQNPAA2eOyutp84Ef01I LVE8Jk5qejsqLURrkzgwDQYJKoZIhvcNAQELBQADggEBALJK1HhO+2AagKSpwbkx 9mzh2O9liNqHofx7L2lhWyuIbimi4TFx5OIVpcojgaC0B3ZPrlyVxLqcF7uVwyfr 0oQ3hOAzODUkEZPLUtM1QOT2aut0lHbge8zK1HtSHXWu63yQlALzLCdTxcS1zV3w JTcsa/D7nvk1yZ3nwU4Z+vqzscjhwZ9Y9lDe1jYmh6EjIUk0ePyjaubGjf/+VoRF OQiA9odB1uWueZYg/TZ9HIdPz+9cyKt2W4vYTCOeJnku7LDMRMOsO1HHnJx5MaY/ Mh9eVudl9H4arlWb2cX93PtT3afN4EVnjF0Ch1Pc8MPtcUlOfC09xiI5divOfP7S MaI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mXY8JQln8gssM8yg3k6 K3eLAbyB3K6Nf9m+fQyaolCNzb5AJMgQhthDR04OywMcs+7eg6DZW/AgJ1wzD01e rrsf4Jupif7Slp0SGGw5IHLXOYWTcmQ+CA//Vbx3rWvL3+TkQEDsfbwbEVY1V5zz NM/1veQRoKCGUnHBErmoNhb0bDbi+kB+GOzhsK5135EYcy+Xm2HlYw4YUq0eZQ5k l/VcwTVyG2VLkJLICP97mxWxrZ3uBz0g8mu6xF4IrEiw2Hp5oFPhua3g8fZXFfKF otxPwt1VCr9JNQ3bEZMFtptx1FQG8HKFY+iyGG6fT9jJrF+XWOFS+VpR1igkIQ8J nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7257247238735161632506028166832519721 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Windsor Mill' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Medicare & Medicaid Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test2.healthcare.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27065220097832570976401944417439221261441380761648541338582439906186883902660894781007285231055885604070190881278020104419160068633330273746123222041661443714353874434520130428041693594037671843323000733784966748099374672757243847037769377171807780591331155624640129950951298000754270192870990793249226771188445144713481910536291400798466590471188169468907264579143972908005985820663674295767388735727532873791131985982797070345539408511135003781922329335701156909018696336334686669545448551765970758071225460998831002511803993792142611852099878154509395039082321880019498039562869793644041336655850611947654433671581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 737bba3f9376c09d392a501cf9332f59d6f5b061 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1413 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aca.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.billing.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001621bcbf60d000004030046304402205da7bea4debcbcafaa02728db880a3392a306ccdf7eca7c71f6ed10556fb9e8002205a2fee19c19a665a428a2614af714a759376468273b1c8d1d5bd73239d5416fc0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001621bcbf7770000040300473045022100da8dfade7ccb46cc514ddea58230d2bcb83895a0c7892e277dfbf77562486251022067833aad034f000d9e3b2bada7ce047f4d482d513c264e6a7a3b2a2d446b9338 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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