test.healthcare.gov
- Centers for Medicare & Medicaid Services -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:62:7c:a0:87:6e:05:9a:e5:1d:e7:0a:02:91:9d:c4 was issued on by DigiCert Inc.
With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Centers for Medicare & Medicaid Services
Organization:
Centers for Medicare & Medicaid Services
State / Province:
Maryland
Locality: Baltimore
Country: US
Locality: Baltimore
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:62:7c:a0:87:6e:05:9a:e5:1d:e7:0a:02:91:9d:c4Serial Number (int): 15132880782980827434144251755287911876
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6f:ff:f6:43:88:d1:3d:23:c6:ec:05:31:56:b4:18:2d:0b:1c:dc:10
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 34:5a:b3:c1:11:5f:27:df:46:48:8d:62:28:e7:a1:96:4d:b2:3f:22
Fingerprint (sha256): 23:1b:a8:8c:2b:7c:ba:a8:e2:9d:f3:98:72:c6:82:32:c1:7d:22:ca:02:23:b2:fc:a1:f0:60:51:ba:68:75:25
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate test.healthcare.gov
55
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.healthcare.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.healthcare.gov
test1.cuidadodesalud.gov
test2.healthcare.gov
imp1b.healthcare.gov
ayudalocal.imp.cuidadodesalud.gov
impl1b.shop.healthcare.gov
assets.test.healthcare.gov
impl0.shop.healthcare.gov
imp2.cuidadodesalud.gov
logini.healthcare.gov
imp1a.healthcare.gov
companyprofiles.test.healthcare.gov
dev1.shop.healthcare.gov
imp1b.cuidadodesalud.gov
aws-prod.cuidadodesalud.gov
dev.cuidadodesalud.gov
finder.test.healthcare.gov
test1.healthcare.gov
aws-prod.healthcare.gov
localhelp.dev.healthcare.gov
dev2.healthcare.gov
api.finder.imp.healthcare.gov
dev.address.api.healthcare.gov
imp.cuidadodesalud.gov
assets.dev.healthcare.gov
dev.healthcare.gov
companyprofiles.dev.healthcare.gov
api.finder.test.healthcare.gov
api.finder.dev.healthcare.gov
imp.healthcare.gov
localhelp.imp.healthcare.gov
test2.cuidadodesalud.gov
imp.address.api.healthcare.gov
test1.shop.healthcare.gov
finder.imp.healthcare.gov
localhelp.test.healthcare.gov
ayudalocal.dev.cuidadodesalud.gov
data.test.healthcare.gov
test.cuidadodesalud.gov
test.address.api.healthcare.gov
companyprofiles.imp.healthcare.gov
dev0.shop.healthcare.gov
dev2.cuidadodesalud.gov
test0.shop.healthcare.gov
imp2.healthcare.gov
localhelp.imp1a.healthcare.gov
finder.dev.healthcare.gov
imp1a.cuidadodesalud.gov
localhelp.prodprime.healthcare.gov
impl1a.shop.healthcare.gov
logint.healthcare.gov
assets.imp.healthcare.gov
test3.healthcare.gov
ayudalocal.test.cuidadodesalud.gov
test3.cuidadodesalud.gov
test1.cuidadodesalud.gov
test2.healthcare.gov
imp1b.healthcare.gov
ayudalocal.imp.cuidadodesalud.gov
impl1b.shop.healthcare.gov
assets.test.healthcare.gov
impl0.shop.healthcare.gov
imp2.cuidadodesalud.gov
logini.healthcare.gov
imp1a.healthcare.gov
companyprofiles.test.healthcare.gov
dev1.shop.healthcare.gov
imp1b.cuidadodesalud.gov
aws-prod.cuidadodesalud.gov
dev.cuidadodesalud.gov
finder.test.healthcare.gov
test1.healthcare.gov
aws-prod.healthcare.gov
localhelp.dev.healthcare.gov
dev2.healthcare.gov
api.finder.imp.healthcare.gov
dev.address.api.healthcare.gov
imp.cuidadodesalud.gov
assets.dev.healthcare.gov
dev.healthcare.gov
companyprofiles.dev.healthcare.gov
api.finder.test.healthcare.gov
api.finder.dev.healthcare.gov
imp.healthcare.gov
localhelp.imp.healthcare.gov
test2.cuidadodesalud.gov
imp.address.api.healthcare.gov
test1.shop.healthcare.gov
finder.imp.healthcare.gov
localhelp.test.healthcare.gov
ayudalocal.dev.cuidadodesalud.gov
data.test.healthcare.gov
test.cuidadodesalud.gov
test.address.api.healthcare.gov
companyprofiles.imp.healthcare.gov
dev0.shop.healthcare.gov
dev2.cuidadodesalud.gov
test0.shop.healthcare.gov
imp2.healthcare.gov
localhelp.imp1a.healthcare.gov
finder.dev.healthcare.gov
imp1a.cuidadodesalud.gov
localhelp.prodprime.healthcare.gov
impl1a.shop.healthcare.gov
logint.healthcare.gov
assets.imp.healthcare.gov
test3.healthcare.gov
ayudalocal.test.cuidadodesalud.gov
test3.cuidadodesalud.gov
Other certificates including the domain name healthcare.gov
(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
test3.healthcare.gov
Certificate
The complete raw certificate details for test.healthcare.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIL8jCCCtqgAwIBAgIQC2J8oIduBZrlHecKApGdxDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA3MjkwMDAwMDBaFw0yMDA0MTUxMjAwMDBaMIGFMQswCQYDVQQGEwJVUzER MA8GA1UECBMITWFyeWxhbmQxEjAQBgNVBAcTCUJhbHRpbW9yZTExMC8GA1UECgwo Q2VudGVycyBmb3IgTWVkaWNhcmUgJiBNZWRpY2FpZCBTZXJ2aWNlczEcMBoGA1UE AxMTdGVzdC5oZWFsdGhjYXJlLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMjjhehROWzt5eNtjEm6XGHKoTK7DlM+ixc2NaQApBnSsu2NvDEcRTjp XvJPo4xCnx6LJWyxQ8m7nuj5hNqtb0iYh3k8KzqhW9boa3RR9AVAtq1axiQK9jc+ PsWtEaJJFcI7z6DVoH38ufHVw8t7OYo/iQiS0GT8sMBe46LSTxw0JHOmv43WbwLO GSVKkLlDVYn4p5ejM9hS4r5rrjrhqDuK2h3ZqchaYktGxjYRl7G40AIU5wZKlMQf GmwU06vZBZN8f4ec5noc9wSH0dtyZ5Qgc8JP00SVosifePVoptsuUrJBpxe0T+J8 DCrHpgXSuQldwV5TYz2TdaKEgtuusN8CAwEAAaOCCIIwggh+MB8GA1UdIwQYMBaA FJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBRv//ZDiNE9I8bsBTFWtBgt CxzcEDCCBfMGA1UdEQSCBeowggXmghN0ZXN0LmhlYWx0aGNhcmUuZ292ghh0ZXN0 MS5jdWlkYWRvZGVzYWx1ZC5nb3aCFHRlc3QyLmhlYWx0aGNhcmUuZ292ghRpbXAx Yi5oZWFsdGhjYXJlLmdvdoIhYXl1ZGFsb2NhbC5pbXAuY3VpZGFkb2Rlc2FsdWQu Z292ghppbXBsMWIuc2hvcC5oZWFsdGhjYXJlLmdvdoIaYXNzZXRzLnRlc3QuaGVh bHRoY2FyZS5nb3aCGWltcGwwLnNob3AuaGVhbHRoY2FyZS5nb3aCF2ltcDIuY3Vp ZGFkb2Rlc2FsdWQuZ292ghVsb2dpbmkuaGVhbHRoY2FyZS5nb3aCFGltcDFhLmhl YWx0aGNhcmUuZ292giNjb21wYW55cHJvZmlsZXMudGVzdC5oZWFsdGhjYXJlLmdv doIYZGV2MS5zaG9wLmhlYWx0aGNhcmUuZ292ghhpbXAxYi5jdWlkYWRvZGVzYWx1 ZC5nb3aCG2F3cy1wcm9kLmN1aWRhZG9kZXNhbHVkLmdvdoIWZGV2LmN1aWRhZG9k ZXNhbHVkLmdvdoIaZmluZGVyLnRlc3QuaGVhbHRoY2FyZS5nb3aCFHRlc3QxLmhl YWx0aGNhcmUuZ292ghdhd3MtcHJvZC5oZWFsdGhjYXJlLmdvdoIcbG9jYWxoZWxw LmRldi5oZWFsdGhjYXJlLmdvdoITZGV2Mi5oZWFsdGhjYXJlLmdvdoIdYXBpLmZp bmRlci5pbXAuaGVhbHRoY2FyZS5nb3aCHmRldi5hZGRyZXNzLmFwaS5oZWFsdGhj YXJlLmdvdoIWaW1wLmN1aWRhZG9kZXNhbHVkLmdvdoIZYXNzZXRzLmRldi5oZWFs dGhjYXJlLmdvdoISZGV2LmhlYWx0aGNhcmUuZ292giJjb21wYW55cHJvZmlsZXMu ZGV2LmhlYWx0aGNhcmUuZ292gh5hcGkuZmluZGVyLnRlc3QuaGVhbHRoY2FyZS5n b3aCHWFwaS5maW5kZXIuZGV2LmhlYWx0aGNhcmUuZ292ghJpbXAuaGVhbHRoY2Fy ZS5nb3aCHGxvY2FsaGVscC5pbXAuaGVhbHRoY2FyZS5nb3aCGHRlc3QyLmN1aWRh ZG9kZXNhbHVkLmdvdoIeaW1wLmFkZHJlc3MuYXBpLmhlYWx0aGNhcmUuZ292ghl0 ZXN0MS5zaG9wLmhlYWx0aGNhcmUuZ292ghlmaW5kZXIuaW1wLmhlYWx0aGNhcmUu Z292gh1sb2NhbGhlbHAudGVzdC5oZWFsdGhjYXJlLmdvdoIhYXl1ZGFsb2NhbC5k ZXYuY3VpZGFkb2Rlc2FsdWQuZ292ghhkYXRhLnRlc3QuaGVhbHRoY2FyZS5nb3aC F3Rlc3QuY3VpZGFkb2Rlc2FsdWQuZ292gh90ZXN0LmFkZHJlc3MuYXBpLmhlYWx0 aGNhcmUuZ292giJjb21wYW55cHJvZmlsZXMuaW1wLmhlYWx0aGNhcmUuZ292ghhk ZXYwLnNob3AuaGVhbHRoY2FyZS5nb3aCF2RldjIuY3VpZGFkb2Rlc2FsdWQuZ292 ghl0ZXN0MC5zaG9wLmhlYWx0aGNhcmUuZ292ghNpbXAyLmhlYWx0aGNhcmUuZ292 gh5sb2NhbGhlbHAuaW1wMWEuaGVhbHRoY2FyZS5nb3aCGWZpbmRlci5kZXYuaGVh bHRoY2FyZS5nb3aCGGltcDFhLmN1aWRhZG9kZXNhbHVkLmdvdoIibG9jYWxoZWxw LnByb2RwcmltZS5oZWFsdGhjYXJlLmdvdoIaaW1wbDFhLnNob3AuaGVhbHRoY2Fy ZS5nb3aCFWxvZ2ludC5oZWFsdGhjYXJlLmdvdoIZYXNzZXRzLmltcC5oZWFsdGhj YXJlLmdvdoIUdGVzdDMuaGVhbHRoY2FyZS5nb3aCImF5dWRhbG9jYWwudGVzdC5j dWlkYWRvZGVzYWx1ZC5nb3aCGHRlc3QzLmN1aWRhZG9kZXNhbHVkLmdvdjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1Ud HwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB Q0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEF BQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29t MD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1 c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWw+qdCxAAAE AwBHMEUCIQCVNigFqdS/GmCsEtOovd2KE1vkBuk74Km1+Hxmx0SYPgIgc6XWNLpb 4uKPKV6liEVHauGG7kLkKxD7EKvtI1Zj3WsAdgCHdb/nWXz4jEOZX73zbv9WjUdW Nv9KtWDBtOr/XqCDDwAAAWw+qdFLAAAEAwBHMEUCICEaeE9i7ehJck9YuOfbczGG rQAdjTc707J/fmRuysktAiEA57+riomOnazYgj//Bh7JrfjCeux1QAspDocALLTM OfYwDQYJKoZIhvcNAQELBQADggEBADwIdu5IjS5RFj8jo9Ipw/tPjO3YBdQ8byAA jOCH33yH6DSydgESsGGZGlu9acKVofxs6b1/vSRH5MzzqXV/wF44p9lBbsUzaMw1 zKBJmw4UNPtRHXfMxCsM5akLXw/vXbEGxhREWgcM336nG7NDPxcnaF1KysNoUszV UGFrv0pq3BOeaG6FiLtYqL18DEPpS7XN+hn+JjvZ3IqAnidK20YV+4oE3xV5jBLd pwONcBIocdHXWMwTseFolE9EclVCHLUKylvP65INod0EY907Vvs3m1iSkmreFSeB ydjTwNSghvVtCjUOoJ6i/YVSlWrHOMhwPjUvQ/ytKtj9g4F8ceo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOOF6FE5bO3l422MSbpc YcqhMrsOUz6LFzY1pACkGdKy7Y28MRxFOOle8k+jjEKfHoslbLFDybue6PmE2q1v SJiHeTwrOqFb1uhrdFH0BUC2rVrGJAr2Nz4+xa0RokkVwjvPoNWgffy58dXDy3s5 ij+JCJLQZPywwF7jotJPHDQkc6a/jdZvAs4ZJUqQuUNVifinl6Mz2FLivmuuOuGo O4raHdmpyFpiS0bGNhGXsbjQAhTnBkqUxB8abBTTq9kFk3x/h5zmehz3BIfR23Jn lCBzwk/TRJWiyJ949Wim2y5SskGnF7RP4nwMKsemBdK5CV3BXlNjPZN1ooSC266w 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15132880782980827434144251755287911876 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Medicare & Medicaid Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.healthcare.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25359856803646749307741590951153634375640760881590449323815843447545362057339439807580402772332945473349671413416844860077171321246468260822065658185520349718304079027957514451455108563689398953647815157548022567048248327185969754384236922839083859572002529289128660103762431892756542871353637863565533056826365622642122488847308730182365062600487687447095704193066811325925805390460425126932593680617942791617784533414588671208888683234014932906753002359238494965644305004123366590678532619699150180813247605823383434038805987029209411448988732843914295548102038448523291544970786480349757835131463732959665871302879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ffff64388d13d23c6ec053156b4182d0b1cdc10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1514 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.imp.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logini.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-prod.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.dev.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.test.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.address.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev0.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.imp1a.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhelp.prodprime.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.shop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logint.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudalocal.test.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.cuidadodesalud.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c3ea9d0b1000004030047304502210095362805a9d4bf1a60ac12d3a8bddd8a135be406e93be0a9b5f87c66c744983e022073a5d634ba5be2e28f295ea58845476ae186ee42e42b10fb10abed235663dd6b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c3ea9d14b00000403004730450220211a784f62ede849724f58b8e7db733186ad001d8d373bd3b27f7e646ecac92d022100e7bfab8a898e9dacd8823fff061ec9adf8c27aec75400b290e87002cb4cc39f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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