dsnp.uhccommunityplan.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:33:18:94:82:48:09:fb:06:ce:2a:08:65:db:86:b9 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dsnp.uhccommunityplan.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:33:18:94:82:48:09:fb:06:ce:2a:08:65:db:86:b9
Serial Number (int): 6911445662628536392494825380419176121
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fd:f1:fc:27:82:74:3a:60:d4:65:10:65:ca:3b:1d:9e:00:51:d7:9a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 42:ba:ee:ca:ea:68:1e:f8:d6:29:9d:63:fb:fe:a1:9e:65:26:b5:a1
Fingerprint (sha256): 63:56:ed:29:e7:66:9e:4e:2a:3f:61:01:f6:6b:22:6b:18:d8:78:a3:5e:4a:a7:b1:6e:5f:0d:56:81:6d:a9:b9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dsnp.uhccommunityplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsnp.uhccommunityplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsnp.uhccommunityplan.com

Other certificates including the domain name uhccommunityplan.com

(limited to 100 certificates)
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps.optum.com
uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
cloud.news.uhccommunityplan.com
sps-stage.optum.com
microsites-prod-externalprodv2.aemprod.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
info.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
uhccommunityplan.uhc.com
info.uhccommunityplan.com
sps-test.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
sps.optum.com
es.uhccommunityplan.com
microsites-prod-externalprodv5.aemprod.optum.com
uhccommunityplan.uhc.com
es.uhccommunityplan.com
sps.optum.com
caid.uhccommunityplan.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
www.uhccommunityplan.com
sps-test.optum.com
sps-stage.optum.com
info.uhccommunityplan.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
click.news.uhccommunityplan.com
microsites-prod-externalprodv3.aemprod.optum.com
uhccommunityplan.com
sps-test.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
akamai-san51.exacttarget.com
sps-stage.optum.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-test.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
sps-dev.optum.com
uhccommunityplan.uhc.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-dev.optum.com
sps-dev.optum.com
akamai-san51.exacttarget.com
sps.optum.com
www.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
pages.news.uhccommunityplan.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com

Certificate

The complete raw certificate details for dsnp.uhccommunityplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qqwyrOCCa/uDBVEt69T
VrMKf3MP+zszTXDp8iy17ArD6Ya1Lmyp6psXQmRUlu+3zqJaUm21aW1ZL5lqacMc
5SLrx91eme7nmQBcd/vbJ6M+Qhg7Rn8AWp3Rw2TAKRw4UH/cudXvZsp1EgS0YQ1M
aYsSinLjTjP6sl1zvg+PvDgBEdwf97qVIK14LEbCEwP1L5Jqjt09tcY9rgV1ji24
6PiyyGTPkwkdKkMVgYtGS/PswJg2ycP36kxykwf7XVY5bInueBNFA6gSli0Z2Bph
MXymijUqK7MGSysBQm84ycH9sRFrN3r9kPLIOBX2Ru/ky60e8GQbhwP6rP7n5VIg
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6911445662628536392494825380419176121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsnp.uhccommunityplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27099167931216243065648468713516437903777780149863808261753067217798890202282866717837011135067051128858362599828583292437617194832517396288461753015662307236083866878067085418582614955317612718449341565732718772404980432870934661180581622985051887251534216204383406147523918315951748622930207152310800858441497124820374665795065876156858232089298444846747675721218861108712968806788148372038771680149183334802137191565590194390160896547261142835970604440481079540496245631385986752855704601846706409422333044203754323978442490650195437310762961920039061218718876845610406884692115119223603994279012406558516464197849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdf1fc2782743a60d4651065ca3b1d9e0051d79a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsnp.uhccommunityplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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