uhccommunityplan.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:8a:2a:cf:69:98:83:b9:cb:3e:7d:60:04:f0:e8:9b was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uhccommunityplan.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:8a:2a:cf:69:98:83:b9:cb:3e:7d:60:04:f0:e8:9b
Serial Number (int): 10022001231085515959064391863602571419
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d0:aa:27:b7:f8:a6:6a:57:a8:eb:51:ae:51:f8:60:79:cb:69:04:75
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 40:d6:50:47:f6:78:ab:fc:2a:77:84:b3:08:fd:1c:ef:5c:12:15:8a
Fingerprint (sha256): 3c:26:3c:b2:47:79:91:11:99:4e:81:a2:8f:56:a3:c0:10:42:02:69:09:2f:42:15:40:9e:62:7b:84:98:7e:e5

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate uhccommunityplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uhccommunityplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uhccommunityplan.com

Other certificates including the domain name uhccommunityplan.com

(limited to 100 certificates)
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps.optum.com
uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
cloud.news.uhccommunityplan.com
sps-stage.optum.com
microsites-prod-externalprodv2.aemprod.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
info.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
uhccommunityplan.uhc.com
info.uhccommunityplan.com
sps-test.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
sps.optum.com
es.uhccommunityplan.com
microsites-prod-externalprodv5.aemprod.optum.com
uhccommunityplan.uhc.com
es.uhccommunityplan.com
sps.optum.com
caid.uhccommunityplan.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
www.uhccommunityplan.com
sps-test.optum.com
sps-stage.optum.com
info.uhccommunityplan.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
click.news.uhccommunityplan.com
microsites-prod-externalprodv3.aemprod.optum.com
uhccommunityplan.com
sps-test.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
akamai-san51.exacttarget.com
sps-stage.optum.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-test.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
sps-dev.optum.com
uhccommunityplan.uhc.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-dev.optum.com
sps-dev.optum.com
akamai-san51.exacttarget.com
sps.optum.com
www.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
pages.news.uhccommunityplan.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com

Certificate

The complete raw certificate details for uhccommunityplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIAehTHX+8fsegt2RP+R
vONayq6USKa+YKL+dIyLTNJIXjFo2lutqqZ9pHlST9JG1nPGiZIeQjs4izywYcLH
jEc8ZpX4D2wx8oLi8LJ5yw+4tlAtrFE7OPgcw2ktp4/JwOgD56QTWFiMiZNdn7EC
Wz1Mz18MKoZWNYZ/YTYt6PZYdhL6CwswQKWN6rTOuoDPMY3CPAMu84AsTK70cc+R
w6PgWri5uLGNWCYSPK/qnfUBCgVI2PGD+OAola98rZj0duLV1VMuhsJcI+VzZ6Pf
w1OvaayKsuuW8HuUOIbrIiyodFK4tMGO0v96MXP5C7dRDeqPwgBt8/kERhrYdDjP
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10022001231085515959064391863602571419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhccommunityplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20766259956435448942236255697591411578885813822511361287020153946819504651161737017584405607887671986028523310253273013101183509649963108589298805546836786415458046720473003734586501239042447850055215089607159503372737952184984227080190211282749796101214499601863648812621254066737397664709507447175823906887919160361957355302394751330081695691556605408345684898690794487921079867667274057160828990123933159680126620486884740755580516401134172689977376341208244231405131995891331351193428023866252123896585680781241875561173542472319131688388062727158273536433252403712868902737132268412097150293260114252879204241181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0aa27b7f8a66a57a8eb51ae51f86079cb690475
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhccommunityplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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