hipeapsurvey-services.perf.elevancehealth.com

- Elevance Health, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2c:50:a2:4c:b7:5d:e2:0e:ff:ac:b0:55:c5:bd:85:15 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Elevance Health, Inc.

Organization: Elevance Health, Inc.
State / Province: Indiana
Locality: Indianapolis
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:50:a2:4c:b7:5d:e2:0e:ff:ac:b0:55:c5:bd:85:15
Serial Number (int): 58904707391664481702781434642458051861
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 87:fe:37:e1:a2:33:af:27:8b:95:e7:ef:07:62:36:6b:d7:cf:0b:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 09:21:9a:b1:53:21:1e:98:ee:c4:f5:3d:a5:aa:62:7b:37:e0:66:d2
Fingerprint (sha256): 5c:b8:f4:4a:c6:a9:e0:eb:26:26:fa:0c:33:11:72:bd:3e:66:0b:63:dd:7f:94:2a:6a:91:c9:17:44:aa:8d:ae

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate hipeapsurvey-services.perf.elevancehealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hipeapsurvey-services.perf.elevancehealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hipeapsurvey-services.perf.elevancehealth.com

Other certificates including the domain name elevancehealth.com

(limited to 100 certificates)
APIKey2.elevancehealth.com
anthemblue.com
careers.elevancehealth.com
non-prods-ps-dp.ex.elevancehealth.com
san-003.ceros.com
fnp8aeprod.elevancehealth.com
employer-origin.anthem.com
partnergw.elevancehealth.com
advancinghealth.elevancehealth.com
Callcenter-voicebot.elevancehealth.com
employer-origin.anthem.com
san-003.ceros.com
anthemblue.com
secure-gateway-ak.anthem.com
pce.elevancehealth.com
secure-gateway-ak.anthem.com
san-003.ceros.com
staging.anthem.com
employer-origin-dr.anthem.com
hipeapsurvey-services.elevancehealth.com
www.amerigroup.com
employer.anthem.com
san-003.ceros.com
securefed.ext.uat.anthem.com
san-003.ceros.com
findcare.elevancehealth.com
saml.anthem.com
secured.provider-ak.anthem.com
anthemblue.com
chromeriver.antheminc.com
saml.uat.anthem.com
saml.anthem.com
san-003.ceros.com
ElevanceHealthoidc.elevancehealth.com
providerexperience-ak.anthem.com
shop.anthem.com
elevancehealth.com
securefed.anthem.com
workspace.elevancehealth.com
shop.anthem.com
Callcenter-voicebot.elevancehealth.com
grpc.nonprod.elevancehealth.com
patient360.elevancehealth.com
san-003.ceros.com
san-003.ceros.com
eshare.antheminc.com
elevancehealth.com
staging.anthem.com
myconnection.elevancehealth.com
myconnection.elevancehealth.com
san-003.ceros.com
pulse.elevancehealth.com
patient360.elevancehealth.com
eshare.elevancehealth.com
secure-gateway.dev.va.antheminc.com
cms.elevancehealth.com
www.elevancehealth.com
staging.anthem.com
dmz-stg-pulse.antheminc.com
employer.anthem.com
advocacy.elevancehealth.com
staging.anthem.com
secure-gateway.dev.va.antheminc.com
saml.anthem.com
secured.provider-ak.anthem.com
patient360.elevancehealth.com
www.elevancehealth.com
eshare.elevancehealth.com
san-003.ceros.com
san-003.ceros.com
providerexperience-ak.anthem.com
staging.anthem.com
anthemblue.com
san-003.ceros.com
anthemblue.com
ciw.synergy.origin.elevancehealth.com
uats-ps-dp.ex.elevancehealth.com
securefed.ext.uat.anthem.com
san-003.ceros.com
test-cms.elevancehealth.com
esharestage.elevancehealth.com
secure-gateway.dev.va.antheminc.com
san-003.ceros.com
secure-gateway.dev.va.antheminc.com
san-003.ceros.com
shop.anthem.com
elevancehealth.com
myconnection.elevancehealth.com
pulse.antheminc.com
ir.elevancehealth.com
hrit-ak.elevancehealth.com
san-003.ceros.com
saml.anthem.com
hipeapsurvey-services.perf.elevancehealth.com
san-003.ceros.com
ciw.synergy.anthem.com
omnichannel-preprod.elevancehealth.com
advocacy.elevancehealth.com
pulse.elevancehealth.com
extcitrix.elevancehealth.com

Certificate

The complete raw certificate details for hipeapsurvey-services.perf.elevancehealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtVY/RGp6J4DK9gn4WR
ZcYkheQqoCPj+W4EHUyRNCZa6Ugq65Yhy6l5WsQJniMyleuJX+wFDo6cKGr3jJ8l
Tojymd1Dsnh+lgsHkr6ue0NfBwO+mfOE1Yan9crYe2Of+D5kkw5I4xCXwvCYValD
VInwaJZt/RF2ATP0oIrYYe8E8MLOSEHIfsuta7jT1t5orlz+9ty0CffSgeT+ZBle
cpLeQk4GZKDrfdx3eB6IRqdcf3P+SyIipwQxub3u1CgsWAJpuiULr6rRNV2+cZEe
RWgxK+BPzqmbBEfmbmkkm422ddg/5ZNysDVRrbHtOzAYhSA65kRFfa0E7kaGd2fC
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58904707391664481702781434642458051861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 16:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 16:20:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Elevance Health, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hipeapsurvey-services.perf.elevancehealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24259123126576564131131284867576479966960270844617988891355657831902134150200643578581179227853221292070585779458825628611321927107986743761637155290792418157049892838786773618973693842488398957454464552434858673807682126480216781097389642509377976136639423214490828438132549933774220693209258321884888397599753707477629605925346373368036722075932020800105060647066233675733551416786913322279608703169188323206772643795218800838582958970596957132288781590277890679886586206367379338171996249111321259280523972785182718285337229947607099889935227931439354459294861547809453885248749222149223019242720017539061323907669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87fe37e1a233af278b95e7ef0762366bd7cf0b9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipeapsurvey-services.perf.elevancehealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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