test2.healthcare.gov

- Centers for Medicare & Medicaid Services -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:e1:78:be:5c:49:c0:0f:0b:9f:92:43:7b:d7:0e:33 was issued on by DigiCert Inc.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centers for Medicare & Medicaid Services

Organization: Centers for Medicare & Medicaid Services
State / Province: Maryland
Locality: Baltimore
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:e1:78:be:5c:49:c0:0f:0b:9f:92:43:7b:d7:0e:33
Serial Number (int): 11804539730514758570623869804032233011
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:f5:1c:e8:92:bb:18:09:d6:de:2e:9b:95:ed:c1:69:57:94:bd:88
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 8d:86:d6:fd:e9:e5:9b:8e:30:81:77:1a:24:e6:ec:d3:ca:cf:97:84
Fingerprint (sha256): 1f:fb:fa:55:9a:41:4d:b6:83:af:f9:99:b7:a1:83:25:53:d7:05:33:ee:81:8d:03:b4:03:f6:99:13:31:37:cb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate test2.healthcare.gov

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test2.healthcare.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test2.healthcare.gov
api.finder.hotfix.healthcare.gov
aws-impl0.ses.api.healthcare.gov
aws-impl1a.cuidadodesalud.gov
aws-impl1a.healthcare.gov
aws-test1.cuidadodesalud.gov
aws-test1.healthcare.gov
companyprofiles.hotfix.healthcare.gov
dev-t.healthcare.gov
dev.geo.api.healthcare.gov
dev.marketplace-int.api.healthcare.gov
dev.marketplace.api.healthcare.gov
finder.hotfix.healthcare.gov
imp-t.healthcare.gov
imp.billing.healthcare.gov
imp.geo.api.healthcare.gov
imp.marketplace-int.api.healthcare.gov
imp.marketplace.api.healthcare.gov
imp1a.marketplace.api.healthcare.gov
imp1b.marketplace.api.healthcare.gov
imp2.geo.api.healthcare.gov
impl.mcr.api.healthcare.gov
impl0.dsrs.api.healthcare.gov
impl1a.mcr.api.healthcare.gov
impl1b.dsrs.api.healthcare.gov
impl1b.mcr.api.healthcare.gov
impl2.mcr.api.healthcare.gov
impl2b.ses.api.healthcare.gov
prod-t.healthcare.gov
prod.ee.cuidadodesalud.gov
prod.ee.healthcare.gov
ratereview.dev.healthcare.gov
ratereview.hotfix.healthcare.gov
ratereview.imp.healthcare.gov
ratereview.test.healthcare.gov
test-t.healthcare.gov
test.aca.api.healthcare.gov
test.geo.api.healthcare.gov
test.marketplace-int.api.healthcare.gov
test.marketplace.api.healthcare.gov
test.mcr.api.healthcare.gov
test0.dsrs.api.healthcare.gov
test0.ee.cuidadodesalud.gov
test0.mcr.api.healthcare.gov
test1.ee.cuidadodesalud.gov
test1.ee.healthcare.gov
test1.mcr.api.healthcare.gov
test2.mcr.api.healthcare.gov
test3.mcr.api.healthcare.gov
testpe.dsrs.api.healthcare.gov
testpe.mcr.api.healthcare.gov
testpe0.mcr.api.healthcare.gov
testpe1.mcr.api.healthcare.gov
test0.ee.healthcare.gov
test0.eeshop.cuidadodesalud.gov
test0.eeshop.healthcare.gov

Other certificates including the domain name healthcare.gov

(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
imp-elb.flh.healthcare.gov

Certificate

The complete raw certificate details for test2.healthcare.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4XOqhzM4GcMijfxESSs
Sq8f17zk6XQUYU4moA7POVm0QThUSFfG5I1qo1DEnU7oN4qYqCLNuzB7t8AZdHXi
sa4vF92YDVgNMFltwIW+Is2q7VBoyYEN841njb4ERb2Qxj6rII+s+Jsy8AJ51tkC
fryhmSjlF+BkXraXO9JavrVbGJ2R+fUCP2U9bRmzit3o4PNbhWVSgrw8ieryvnro
Oh8y0NVjkm7grKAcuYtDZSaccEiqIcBoBMmlZh2f+NMRUq0Ye2towy8RTftLUbvY
wAzJcXKEhbI2RUjRrgirgV9rNC57YTtNrIXjofanQ6TBNq/OIFhPN/rznMJQBWbG
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11804539730514758570623869804032233011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Medicare & Medicaid Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test2.healthcare.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22157686199625263739244380038698955838465311036178686454584466272146823803354467136404340408038399303448401413319767474565833469635472682020507212205285922112217787542854864339889767925685396386444579073721804734845080533585518673831286732250374647267350320104169502751117935902137395247961566109857788141632673533206297840130001389882063601051404816789965018219586060005367515187518056682922202052641886197962414468091649844407150708955257471020578403839277075110462116990023904388581181582422889460870216733893708260692532781332746543725899086730953177407645073018330545233205890158033558867639900829474632786953793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00f51ce892bb1809d6de2e9b95edc1695794bd88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1716 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.hotfix.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl0.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1a.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-impl1a.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test1.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test1.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.hotfix.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-t.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geo.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace-int.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.hotfix.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp-t.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.billing.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.geo.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace-int.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.marketplace.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.marketplace.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.geo.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2b.ses.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-t.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.dev.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.hotfix.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.imp.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.test.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-t.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aca.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.geo.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace-int.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.dsrs.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe0.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe1.mcr.api.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.healthcare.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.cuidadodesalud.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.healthcare.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a16feadce9843b5dd5c7828a224d14bc6d72ca61d03a4d083288b9cee7374e4c7512c9347c8821e1402185fab57e110727c5ad4de63dd4cc6866c7ade3ad32e9f0f450648bc4db684de83d2a455685585520197460224f82d2dab431cb82e99de5aa1c215f8a3b515e0aa528a43424e941441a88e699ab3750b0cec88fcf76d1d411094d298896aacc2faa3617eac6c0b4db4a230699af21515354b4fd6a98ccbb0d0ea6d690ed8569384ce0e0500bb6003a1fcc20e8e339b280dade0a4b67a146c40dbc5c6e122e564444564402be3d486dc9c6fe2dd2b72dc5b8b39c3fc263399998e90319ef8be403325e91cc654f08a39d3f23e8c99ec5da37d8fd167fa6