info.uhcmedicaresolutions.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:eb:30:24:71:b2:6b:b9:bd:27:4c:ed:9c:72:ee:21 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=info.uhcmedicaresolutions.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:eb:30:24:71:b2:6b:b9:bd:27:4c:ed:9c:72:ee:21
Serial Number (int): 17171902154237004386441519024353504801
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e0:ed:b5:86:ab:99:11:64:99:54:b0:cf:65:a7:a4:ab:e6:47:32:dd
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 88:68:54:c6:8a:8b:47:a3:30:40:6d:3a:7f:1e:21:91:c4:b3:ef:e6
Fingerprint (sha256): 19:8d:52:dd:2b:52:e5:51:5b:da:77:09:fe:b3:19:5d:4c:73:32:88:a2:09:b3:c1:1c:b7:1c:bf:63:a2:dc:b3

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate info.uhcmedicaresolutions.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info.uhcmedicaresolutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.uhcmedicaresolutions.com

Other certificates including the domain name uhcmedicaresolutions.com

(limited to 100 certificates)
offline-mnrgeneric.uhc.com
caid.uhccommunityplan.com
visualizeyou.member.uhcmedicaresolutions.com
5695716924063744-fe4.pantheonsite.io
offline.uhcmedicaresolutions.com
gpd-acq-azure.optum.com
5695716924063744-fe4.pantheonsite.io
dlm-mnrfed.uhcsouthflorida.com
www.uhcmedicaresolutions.com
mnrgeneric.uhc.com
www.uhcmedicaresolutions.com
caid.uhccommunityplan.com
pdp.uhcmedicaresolutions.com
microsites-prod-externalprodv2.aemprod.optum.com
gpd-acq-azure.optum.com
akamai-san205.exacttarget.com
www.uhcmedicaresolutions.com
cipsep.uhcmedicaresolutions.com
planselector.uhcmedicaresolutions.com
www.aarpmedicareplans.com
mnrgeneric2.uhc.com
planselector.uhcmedicaresolutions.com
mnrgeneric.uhc.com
www.uhcmedicaresolutions.com
w3.aarpmedicarerx.com
akamai-san205.exacttarget.com
cipsep.uhcmedicaresolutions.com
roadtripreunion.member.uhcmedicaresolutions.com
info.uhcmedicaresolutions.com
caid.uhccommunityplan.com
offline.aarpmedicareplans.com
akamai-san205.exacttarget.com
5695716924063744-fe4.pantheonsite.io
caid.uhccommunityplan.com
click.news.uhcmedicaresolutions.com
info.uhcmedicaresolutions.com
renew.member.uhcmedicaresolutions.com
mnrgeneric2.uhc.com
w3.aarpmedicarerx.com
www.uhcmedicaresolutions.com
mnrgeneric.uhc.com
hl.member.uhcmedicaresolutions.com
offline.uhcmedicaresolutions.com
www.uhcmedicaresolutions.com
offline.uhcmedicaresolutions.com
mnrgeneric2.uhc.com
roadtripreunion.member.uhcmedicaresolutions.com
field.uhcmedicaresolutions.com
microsites-prod-externalprodv5.aemprod.optum.com
offline.uhcmedicaresolutions.com
www.uhcmedicaresolutions.com
pdp.uhcmedicaresolutions.com
caid.uhccommunityplan.com
www.uhcmedicaresolutions.com
ma.uhcmedicaresolutions.com
ma.uhcmedicaresolutions.com
caid.uhccommunityplan.com
offline-mnrgeneric.uhc.com
planselector.uhcmedicaresolutions.com
akamai-san205.exacttarget.com
mnrgeneric.uhc.com
akamai-san205.exacttarget.com

akamai-san205.exacttarget.com
ma.uhcmedicaresolutions.com
www.uhcmedicaresolutions.com
cip.uhcmedicaresolutions.com
hl.member.uhcmedicaresolutions.com
mnrgeneric.uhc.com
5695716924063744-fe4.pantheonsite.io

microsites-prod-externalprodv3.aemprod.optum.com
mnrgeneric2.uhc.com
5695716924063744-fe4.pantheonsite.io
akamai-san205.exacttarget.com
offline-mnrgeneric2.uhc.com
field.uhcmedicaresolutions.com
offline.uhcmedicaresolutions.com
field.uhcmedicaresolutions.com
walgreens.uhcmedicaresolutions.com
5695716924063744-fe4.pantheonsite.io
renew.member.uhcmedicaresolutions.com
ma.uhcmedicaresolutions.com
pdp.uhcmedicaresolutions.com
mars.member.uhcmedicaresolutions.com
mnrgeneric.uhc.com
5695716924063744-fe4.pantheonsite.io
www.uhcmedicaresolutions.com
5695716924063744-fe4.pantheonsite.io
offline.uhcmedicaresolutions.com
gpd-acq-azure.optum.com
roadtripreunion.member.uhcmedicaresolutions.com
5695716924063744-fe4.pantheonsite.io
offline-mnrgeneric2.uhc.com
www.uhcmedicaresolutions.com
5695716924063744-fe4.pantheonsite.io
offline.uhcmedicaresolutions.com
caid.uhccommunityplan.com
hl-shra.member.uhcmedicaresolutions.com
ma.uhcmedicaresolutions.com

Certificate

The complete raw certificate details for info.uhcmedicaresolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tvFNyNMMWC80WYgZEED
0EBGzSpSElQgYzuLmu581v6gvqc4h7suMQXKrNoNcfgknpZL/2HAh+Eg7G5/C+yD
l4sWVeQDtHQZzYgZnah/RLppSbUBO98/dvp1Y2g0UtK68QXYRTawpARnd1BEn2Rv
sPoSyY1NbKT7qWhEciz5kqWN6HWXqxWCQjuPuHUYEigCs16AcWNT8XifhY9ZNtj2
EElpQlqZ7CRWPLMcXacCLrLTu7ydIBQh170qjPigaj9tCIipXogFJu2dh3NzOut5
mpshKJq1xKHvOcdeeiNsWWpktp4ED5O3mEbArH3iwZkJMzGpHa419R0kHIIKzU2F
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17171902154237004386441519024353504801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info.uhcmedicaresolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27123370072569279692382413602964941463811439645676023986311159545519668719143177677165122249403251554172973671050388650968017452793047789204630672243113005506230504059345730404803320772621102738226974629072483752648748976568563923503682885412865573315204808981315639116485952181126680950058218800370535639726971874599657958871989091897074293938473491879728555093958786328465146572113193836121953837728769079148165448275838750870625499551714934900803809620924471003511654014877577996032298361103648139890405527328308098646053346451730949981211787721467949146502365492977550458192711287258801500605764614445414124193253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0edb586ab9911649954b0cf65a7a4abe64732dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.uhcmedicaresolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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