test2.healthcare.gov
- Centers for Medicare & Medicaid Services -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 03:56:f9:95:d9:05:ca:da:cd:05:53:c9:ae:6c:4c:02 was issued on by DigiCert Inc.
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Centers for Medicare & Medicaid Services
Organization:
Centers for Medicare & Medicaid Services
Organization unit: OIS
Organization unit: OIS
State / Province:
Maryland
Locality: Windsor Mill
Country: US
Locality: Windsor Mill
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:56:f9:95:d9:05:ca:da:cd:05:53:c9:ae:6c:4c:02Serial Number (int): 4439283709341516400609915243277863938
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 0f:64:a9:02:7f:6a:66:21:6f:1b:70:c5:7d:3b:ed:de:69:47:77:57
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 69:5c:3a:08:93:17:b5:48:45:3c:0b:26:54:9b:47:67:81:bc:45:ac
Fingerprint (sha256): 29:cb:12:1a:3d:cc:0e:de:a9:a6:31:7a:c0:e2:09:4e:6a:7b:dd:4e:6d:49:73:1e:25:dd:53:d3:ac:6a:18:8a
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate test2.healthcare.gov
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test2.healthcare.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test2.healthcare.gov
testpe.mcr.api.healthcare.gov
test2.mcr.api.healthcare.gov
test.geo.api.healthcare.gov
test0.dsrs.api.healthcare.gov
test0.eeshop.cuidadodesalud.gov
testpe.dsrs.api.healthcare.gov
ratereview.dev.healthcare.gov
test0.eeshop.healthcare.gov
dev.geo.api.healthcare.gov
aws-test1.cuidadodesalud.gov
impl.mcr.api.healthcare.gov
impl1a.mcr.api.healthcare.gov
test1.mcr.api.healthcare.gov
prod.ee.healthcare.gov
imp2.geo.api.healthcare.gov
test0.ee.healthcare.gov
dev-t.healthcare.gov
imp.billing.healthcare.gov
imp-t.healthcare.gov
imp.geo.api.healthcare.gov
impl2.mcr.api.healthcare.gov
ratereview.hotfix.healthcare.gov
prod-t.healthcare.gov
prod.ee.cuidadodesalud.gov
imp.marketplace.api.healthcare.gov
dev.marketplace-int.api.healthcare.gov
aws-test1.healthcare.gov
impl1b.mcr.api.healthcare.gov
test.aca.api.healthcare.gov
finder.hotfix.healthcare.gov
imp.marketplace-int.api.healthcare.gov
ratereview.imp.healthcare.gov
test.marketplace.api.healthcare.gov
dev.marketplace.api.healthcare.gov
test1.ee.cuidadodesalud.gov
imp1a.marketplace.api.healthcare.gov
imp1b.marketplace.api.healthcare.gov
test.marketplace-int.api.healthcare.gov
impl1b.dsrs.api.healthcare.gov
companyprofiles.hotfix.healthcare.gov
test0.ee.cuidadodesalud.gov
test1.ee.healthcare.gov
impl0.dsrs.api.healthcare.gov
api.finder.hotfix.healthcare.gov
test.mcr.api.healthcare.gov
test-t.healthcare.gov
ratereview.test.healthcare.gov
testpe.mcr.api.healthcare.gov
test2.mcr.api.healthcare.gov
test.geo.api.healthcare.gov
test0.dsrs.api.healthcare.gov
test0.eeshop.cuidadodesalud.gov
testpe.dsrs.api.healthcare.gov
ratereview.dev.healthcare.gov
test0.eeshop.healthcare.gov
dev.geo.api.healthcare.gov
aws-test1.cuidadodesalud.gov
impl.mcr.api.healthcare.gov
impl1a.mcr.api.healthcare.gov
test1.mcr.api.healthcare.gov
prod.ee.healthcare.gov
imp2.geo.api.healthcare.gov
test0.ee.healthcare.gov
dev-t.healthcare.gov
imp.billing.healthcare.gov
imp-t.healthcare.gov
imp.geo.api.healthcare.gov
impl2.mcr.api.healthcare.gov
ratereview.hotfix.healthcare.gov
prod-t.healthcare.gov
prod.ee.cuidadodesalud.gov
imp.marketplace.api.healthcare.gov
dev.marketplace-int.api.healthcare.gov
aws-test1.healthcare.gov
impl1b.mcr.api.healthcare.gov
test.aca.api.healthcare.gov
finder.hotfix.healthcare.gov
imp.marketplace-int.api.healthcare.gov
ratereview.imp.healthcare.gov
test.marketplace.api.healthcare.gov
dev.marketplace.api.healthcare.gov
test1.ee.cuidadodesalud.gov
imp1a.marketplace.api.healthcare.gov
imp1b.marketplace.api.healthcare.gov
test.marketplace-int.api.healthcare.gov
impl1b.dsrs.api.healthcare.gov
companyprofiles.hotfix.healthcare.gov
test0.ee.cuidadodesalud.gov
test1.ee.healthcare.gov
impl0.dsrs.api.healthcare.gov
api.finder.hotfix.healthcare.gov
test.mcr.api.healthcare.gov
test-t.healthcare.gov
ratereview.test.healthcare.gov
Other certificates including the domain name healthcare.gov
(limited to 100 certificates)
splunk.aws.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
imp-elb.flh.healthcare.gov
test3.healthcare.gov
test3.healthcare.gov
www.healthcare.gov
test2.healthcare.gov
www2.cms.gov
orig.impl1a.ses.api.healthcare.gov
www.healthcare.gov
pet-elb.imp1b.healthcare.gov
test-t.healthcare.gov
shop.prod.healthcare.gov
www.healthcare.gov
www.healthcare.gov
adobe-ep.healthcare.gov
www2.healthcare.gov
tmdsm.aws.healthcare.gov
www2.cms.gov
www2.cms.gov
app-dc01.prod.healthcare.gov
app-dc01.prod.healthcare.gov
test3.healthcare.gov
www2.healthcare.gov
tmdsmdr.aws.healthcare.gov
net.prod.healthcare.gov
test2.healthcare.gov
api.healthcare.gov
www.healthcare.gov
impl.mcr.dsh.healthcare.gov
search.test.healthcare.gov
www2.cms.gov
www2.cms.gov
test.healthcare.gov
dsrs.api.healthcare.gov
test4.healthcare.gov
test4.healthcare.gov
net-dc01.prod.healthcare.gov
test3.healthcare.gov
prod.pc2-elb.healthcare.gov
vpneast.aws.cms.gov
www.healthcare.gov
test3.healthcare.gov
orig.ses.api.healthcare.gov
www2.cms.gov
www2.cms.gov
test2.healthcare.gov
sls-elb.imp.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
test2.healthcare.gov
search1.healthcare.gov
test.healthcare.gov
api.healthcare.gov
tmdsmdr.aws.healthcare.gov
test3.healthcare.gov
chat.healthcare.gov
nagiosdr.aws.healthcare.gov
test2.healthcare.gov
test3.healthcare.gov
elb1.imp1a.healthcare.gov
www2.cms.gov
test3.healthcare.gov
prod-t.healthcare.gov
www2.cms.gov
test2.healthcare.gov
origin-es-app.prod.healthcare.gov
test0.mcr.gw.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
www2.healthcare.gov
test.healthcare.gov
test.healthcare.gov
b.dev.healthcare.gov
www.healthcare.gov
www2.healthcare.gov
test2.healthcare.gov
mcr.api.healthcare.gov
api-manager-elb.dev.healthcare.gov
www2.cms.gov
imp1b-marketplace-elb.api.healthcare.gov
origin-es-app.prod.healthcare.gov
test2.healthcare.gov
test.healthcare.gov
www2.cms.gov
www2.healthcare.gov
app1a.imp.healthcare.gov
test3.healthcare.gov
test0.shop.healthcare.gov
test2.healthcare.gov
chat.healthcare.gov
api-manager-elb.imp.healthcare.gov
www.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www.healthcare.gov
test.healthcare.gov
www2.cms.gov
api.healthcare.gov
www2.cms.gov
test2.healthcare.gov
imp-elb.flh.healthcare.gov
Certificate
The complete raw certificate details for test2.healthcare.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIL1zCCCr+gAwIBAgIQA1b5ldkFytrNBVPJrmxMAjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA1MTEwMDAwMDBaFw0xODEyMTQxMjAwMDBaMIGXMQswCQYDVQQGEwJVUzER MA8GA1UECBMITWFyeWxhbmQxFTATBgNVBAcTDFdpbmRzb3IgTWlsbDExMC8GA1UE CgwoQ2VudGVycyBmb3IgTWVkaWNhcmUgJiBNZWRpY2FpZCBTZXJ2aWNlczEMMAoG A1UECxMDT0lTMR0wGwYDVQQDExR0ZXN0Mi5oZWFsdGhjYXJlLmdvdjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL91GRrC6fa2PhPy7ZbPY0YSVNc2Owtd yEiWBeS5Poz2OZy+RIeZNWcN3eshbjCKGzEy/rUDJuxcCayThKOj9XA7uEvwI5N5 mR1Cp6u/UQR/8q2/HpUB/46LQK6LYi617FbefQNY/QtP+eH8u7eKD13ZF9aXdUwC 6pwviVAHYj0UD062CEnIlkqOPOQLthdW2NT7VS+Na3xcbYXVqlQlX9nGRhXBjRtS NlNH3n+9P/4Qo/NU2oa8LLVRBnLn48Df0NB78B4eJ20BZFrC5bw+3TSRtZbcsve6 7pvirY+SQCLr5Yt3uwC6qXNHIIW++nfA3PTIzO849GftM2eV4cqZ8tsCAwEAAaOC CFUwgghRMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQW BBQPZKkCf2pmIW8bcMV9O+3eaUd3VzCCBcYGA1UdEQSCBb0wggW5ghR0ZXN0Mi5o ZWFsdGhjYXJlLmdvdoIddGVzdHBlLm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCHHRl c3QyLm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCG3Rlc3QuZ2VvLmFwaS5oZWFsdGhj YXJlLmdvdoIddGVzdDAuZHNycy5hcGkuaGVhbHRoY2FyZS5nb3aCH3Rlc3QwLmVl c2hvcC5jdWlkYWRvZGVzYWx1ZC5nb3aCHnRlc3RwZS5kc3JzLmFwaS5oZWFsdGhj YXJlLmdvdoIdcmF0ZXJldmlldy5kZXYuaGVhbHRoY2FyZS5nb3aCG3Rlc3QwLmVl c2hvcC5oZWFsdGhjYXJlLmdvdoIaZGV2Lmdlby5hcGkuaGVhbHRoY2FyZS5nb3aC HGF3cy10ZXN0MS5jdWlkYWRvZGVzYWx1ZC5nb3aCG2ltcGwubWNyLmFwaS5oZWFs dGhjYXJlLmdvdoIdaW1wbDFhLm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCHHRlc3Qx Lm1jci5hcGkuaGVhbHRoY2FyZS5nb3aCFnByb2QuZWUuaGVhbHRoY2FyZS5nb3aC G2ltcDIuZ2VvLmFwaS5oZWFsdGhjYXJlLmdvdoIXdGVzdDAuZWUuaGVhbHRoY2Fy ZS5nb3aCFGRldi10LmhlYWx0aGNhcmUuZ292ghppbXAuYmlsbGluZy5oZWFsdGhj YXJlLmdvdoIUaW1wLXQuaGVhbHRoY2FyZS5nb3aCGmltcC5nZW8uYXBpLmhlYWx0 aGNhcmUuZ292ghxpbXBsMi5tY3IuYXBpLmhlYWx0aGNhcmUuZ292giByYXRlcmV2 aWV3LmhvdGZpeC5oZWFsdGhjYXJlLmdvdoIVcHJvZC10LmhlYWx0aGNhcmUuZ292 ghpwcm9kLmVlLmN1aWRhZG9kZXNhbHVkLmdvdoIiaW1wLm1hcmtldHBsYWNlLmFw aS5oZWFsdGhjYXJlLmdvdoImZGV2Lm1hcmtldHBsYWNlLWludC5hcGkuaGVhbHRo Y2FyZS5nb3aCGGF3cy10ZXN0MS5oZWFsdGhjYXJlLmdvdoIdaW1wbDFiLm1jci5h cGkuaGVhbHRoY2FyZS5nb3aCG3Rlc3QuYWNhLmFwaS5oZWFsdGhjYXJlLmdvdoIc ZmluZGVyLmhvdGZpeC5oZWFsdGhjYXJlLmdvdoImaW1wLm1hcmtldHBsYWNlLWlu dC5hcGkuaGVhbHRoY2FyZS5nb3aCHXJhdGVyZXZpZXcuaW1wLmhlYWx0aGNhcmUu Z292giN0ZXN0Lm1hcmtldHBsYWNlLmFwaS5oZWFsdGhjYXJlLmdvdoIiZGV2Lm1h cmtldHBsYWNlLmFwaS5oZWFsdGhjYXJlLmdvdoIbdGVzdDEuZWUuY3VpZGFkb2Rl c2FsdWQuZ292giRpbXAxYS5tYXJrZXRwbGFjZS5hcGkuaGVhbHRoY2FyZS5nb3aC JGltcDFiLm1hcmtldHBsYWNlLmFwaS5oZWFsdGhjYXJlLmdvdoIndGVzdC5tYXJr ZXRwbGFjZS1pbnQuYXBpLmhlYWx0aGNhcmUuZ292gh5pbXBsMWIuZHNycy5hcGku aGVhbHRoY2FyZS5nb3aCJWNvbXBhbnlwcm9maWxlcy5ob3RmaXguaGVhbHRoY2Fy ZS5nb3aCG3Rlc3QwLmVlLmN1aWRhZG9kZXNhbHVkLmdvdoIXdGVzdDEuZWUuaGVh bHRoY2FyZS5nb3aCHWltcGwwLmRzcnMuYXBpLmhlYWx0aGNhcmUuZ292giBhcGku ZmluZGVyLmhvdGZpeC5oZWFsdGhjYXJlLmdvdoIbdGVzdC5tY3IuYXBpLmhlYWx0 aGNhcmUuZ292ghV0ZXN0LXQuaGVhbHRoY2FyZS5nb3aCHnJhdGVyZXZpZXcudGVz dC5oZWFsdGhjYXJlLmdvdjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2Vv dHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCG SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6 Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0 cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb 37jjd80OyA3cEAAAAWNPgTtXAAAEAwBHMEUCIQCk4OLUGzc6oq/ahYTX+je80r7Q RPcD7OeSE7u7HOegMgIgDK45X4ZeA/4wnxhnw4OoNou7069iUFEziNHW8zIIweUA dgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWNPgT0EAAAEAwBH MEUCIH5GtnGwn5EMWg7S/kiKxvNlmgwoHRqOnSKdlgVG6DufAiEArUew51P2Tm4I zN83Oa3NtOkOXt2j6nPAdj7adcDOCocwDQYJKoZIhvcNAQELBQADggEBAGD9bM75 +FZQbXAhH+LB7x6nbCZiQ2Rl+k9CX0If3vrjj/E52Gq7Y4bkJTdicYrPurWErBO9 SBwQ4LY5yr5RdlmxomRp3gWmMexmjdYmscUStRcaIhO/vnU66IJurA8Hd0LGXKKX mQkEu7qHmeKSO7K2kPKgZj56G2WpNYq8gvhDwaJfyLJkVg8qyq/TzoluW9OemWTw nZaUZ4kHaWKkgFVTNCYjRIe3b7REZT9aYmYSHDdNFz0IQaQ2MrrxJUqTd+sg2wZ5 0dSl1kIEWAt6eYiySeaSqV6v+6SqnYi9iVkmNLy41fusFyfICBQ4NYsuw7RG3zie jbGWCqBPT1Y//Fk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3UZGsLp9rY+E/Ltls9j RhJU1zY7C13ISJYF5Lk+jPY5nL5Eh5k1Zw3d6yFuMIobMTL+tQMm7FwJrJOEo6P1 cDu4S/Ajk3mZHUKnq79RBH/yrb8elQH/jotArotiLrXsVt59A1j9C0/54fy7t4oP XdkX1pd1TALqnC+JUAdiPRQPTrYISciWSo485Au2F1bY1PtVL41rfFxthdWqVCVf 2cZGFcGNG1I2U0fef70//hCj81TahrwstVEGcufjwN/Q0HvwHh4nbQFkWsLlvD7d NJG1ltyy97rum+Ktj5JAIuvli3e7ALqpc0cghb76d8Dc9MjM7zj0Z+0zZ5Xhypny 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4439283709341516400609915243277863938 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Windsor Mill' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Medicare & Medicaid Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test2.healthcare.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24169259456288453764794149426760875103316562229263029290520466032709125093537968883229367553882122262976781293943937183503457135225577864723286558734258032931493410834812440939717906470841691493810359049006192201178308487532993919048196688917988174721411301136031312421417010490821515073614229229246913412191504976596322305486205608348173332063624129341874684576748725548277794122499983402459142096422708334519304695709357320095922463384638142913915239220462659720523335005715710018709148922676775393717161963896309319218794216816524506142120475908808132533180100985856035874529287271386709532900776014741084160258779 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0f64a9027f6a66216f1b70c57d3bedde69477757 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1469 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testpe.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.dev.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.eeshop.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test1.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1a.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp2.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.billing.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.geo.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl2.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-test1.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aca.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.imp.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1a.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imp1b.marketplace.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketplace-int.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl1b.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyprofiles.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.ee.cuidadodesalud.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.ee.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impl0.dsrs.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.finder.hotfix.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mcr.api.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-t.healthcare.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratereview.test.healthcare.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001634f813b570000040300473045022100a4e0e2d41b373aa2afda8584d7fa37bcd2bed044f703ece79213bbbb1ce7a03202200cae395f865e03fe309f1867c383a8368bbbd3af6250513388d1d6f33208c1e50076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001634f813d04000004030047304502207e46b671b09f910c5a0ed2fe488ac6f3659a0c281d1a8e9d229d960546e83b9f022100ad47b0e753f64e6e08ccdf3739adcdb4e90e5edda3ea73c0763eda75c0ce0a87 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0060fd6ccef9f856506d70211fe2c1ef1ea76c2662436465fa4f425f421fdefae38ff139d86abb6386e4253762718acfbab584ac13bd481c10e0b639cabe517659b1a26469de05a631ec668dd626b1c512b5171a2213bfbe753ae8826eac0f077742c65ca297990904bbba8799e2923bb2b690f2a0663e7a1b65a9358abc82f843c1a25fc8b264560f2acaafd3ce896e5bd39e9964f09d96946789076962a48055533426234487b76fb444653f5a6266121c374d173d0841a43632baf1254a9377eb20db0679d1d4a5d64204580b7a7988b249e692a95eaffba4aa9d88bd89592634bcb8d5fbac1727c8081438358b2ec3b446df389e8db1960aa04f4f563ffc59