provider-stg3.liveandworkwell.com

- UnitedHealth Group Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 52:9f:0e:59:52:63:e1:fa:23:fa:4b:25:59:13:9e:f9 was issued on by COMODO CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UnitedHealth Group Inc.

Organization: UnitedHealth Group Inc.
Organization unit: Optum Tech ETP & Info Srvcs
Organization unit: Enterprise SSL Pro
Address: 9900 Bren Road East
Postal code: 55343
State / Province: Minnesota
Locality: Minnetonka
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 52:9f:0e:59:52:63:e1:fa:23:fa:4b:25:59:13:9e:f9
Serial Number (int): 109822561885409575672189784126838251257
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 31:5b:37:a4:73:43:d5:c3:7c:8e:6b:ac:97:5e:df:de:ef:fc:35:7b
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 51:f7:f8:61:1e:81:75:bf:00:69:e3:9c:10:01:c2:c3:a9:30:df:b0
Fingerprint (sha256): 63:84:5b:e3:ae:a5:ce:54:8d:fb:0c:b6:b1:8d:7d:cd:bb:17:1b:05:c9:21:92:fa:1a:31:60:ec:e8:cb:8f:a2

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate provider-stg3.liveandworkwell.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for provider-stg3.liveandworkwell.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

provider-stg3.liveandworkwell.com

Other certificates including the domain name liveandworkwell.com

(limited to 100 certificates)
provider-sm-stg.liveandworkwell.com
sr-saml-stg.liveandworkwell.com
lawwpe-stagecloud.liveandworkwell.com
gffo-stg1.optum.com
healthsafeid-stage1.optum.com
hs.liveandworkwell.com
healthsafeid-dev1.optum.com
m-stage.liveandworkwell.com
sr-smsc.liveandworkwell.com
rba-screen.healthsafe-id.com
au-stg.liveandworkwell.com
saml.liveandworkwell.com
www.liveandworkwell.com
healthsafeid.optum.com
familysupport-k8s.optum.com
forms.liveandworkwell.com
healthsafeid.optum.com
stg3.liveandworkwell.com
m-prod.liveandworkwell.com
sr-smsc-stg.liveandworkwell.com
lawwpe-devcloud.liveandworkwell.com
m-dev.liveandworkwell.com
www.liveandworkwell.com
chat.liveandworkwell.com
healthsafeid-dev1.optum.com
forms-stg.liveandworkwell.com
www.liveandworkwell.com
provider.liveandworkwell.com
stg3-dark.liveandworkwell.com
m-prod.liveandworkwell.com
chat.liveandworkwell.com
rba-screen.healthsafe-id.com
forms.liveandworkwell.com
messenger-stg.optum.com
au-stg.liveandworkwell.com
gffo.optum.com
healthsafeid.optum.com

messenger-prod.optum.com
forms.liveandworkwell.com
healthsafeid-stage1.optum.com
messenger-prod.optum.com
healthsafeid-stage1.optum.com
rba-screen.healthsafe-id.com
gffo.optum.com
optummessenger-prod.optum.com
www.au.liveandworkwell.com
healthsafeid-stage1.optum.com
hs.liveandworkwell.com
gffo-stg.optum.com
hs-aem.liveandworkwell.com
healthsafeid.optum.com
messenger-stage.optum.com
healthsafeid-test1.optum.com
saml-stg.liveandworkwell.com
webep0015-direct.prodliveandworkwell.com
healthsafeid-stage1.optum.com
optummessenger-prod.optum.com
m-prod.liveandworkwell.com
saml.liveandworkwell.com
prevention.liveandworkwell.com
optummessenger-prod.optum.com
saml-stg.liveandworkwell.com
forms-stg.liveandworkwell.com
provider.liveandworkwell.com
chat.liveandworkwell.com
m-dev.liveandworkwell.com
healthsafeid.optum.com
www.liveandworkwell.com
healthsafeid-stage1.optum.com
www.liveandworkwell.com
gffo-stg1.optum.com
gffo-stg.optum.com
provider-stg3.liveandworkwell.com
prevention.liveandworkwell.com
messenger-prod.optum.com
m-prod.liveandworkwell.com
webep0015-direct.prodliveandworkwell.com
m-stage.liveandworkwell.com
www.au.liveandworkwell.com
chat.liveandworkwell.com
messenger-stg.optum.com
healthsafeid.optum.com
gffo-stg.optum.com
provider-sm-stg.liveandworkwell.com
sr-smsc.liveandworkwell.com
gffo.optum.com

webe0167-direct.prodliveandworkwell.com
sr-smsc.liveandworkwell.com
hs.liveandworkwell.com
prevention.liveandworkwell.com
gffo.optum.com
hs.liveandworkwell.com
m-dev.liveandworkwell.com
stg3.liveandworkwell.com
www.liveandworkwell.com
sr-saml.liveandworkwell.com
stg.liveandworkwell.com
prevention-stg.liveandworkwell.com

Certificate

The complete raw certificate details for provider-stg3.liveandworkwell.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0++oZKccwVe5cA0S74KQ
n8/dwGV2q9mz/5qpYURV4DhlwNYmoK2OYjZFRtMplvjejfYKoYbJcy+gidwN7n60
T4W5dMM0UE3VQeDieAFYj2vUyUzXxoVnT4qScXxzZETjKj/w6vKpe7SBaWNCImAq
0DnKU2Qa6Kp+nuvrtrg9Os92pd/PrwkabT46AZxtJUIYR0f96ivp6iEccmLiZSjg
7iwHBYtUUo6420qxYdE5P/6kmspogqs9Obp4NQZhA1am7iNXORAZybd6S2ma+ogc
PlbYQ7pxkmNeL6be1vgm7X+zd3qm5nLx7dvU1hirNWIhgHP4oJzWSG+O0Q8JlcFB
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109822561885409575672189784126838251257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55343'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnetonka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9900 Bren Road East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UnitedHealth Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Optum Tech ETP & Info Srvcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Pro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'provider-stg3.liveandworkwell.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26754462006652068090450140094975608813416631553051109744077701586536559764628886533159063602313753732858212945865104583454931350688061598084084360013054094832826472167964202914531714953739956998625792968475261676116117335838172606140609834380865118156497320424714987795409108666564652089120367801000534332156586074532002896763388963485871873807056485113101935756212824291021909409119809818202530102505615316648671257921170240155547923139044568751851958204254167845457500716294904640967395673985027439073767846981268069554304412326235822566012196081442811855685031845887895914405200482281594928044603062866973267411377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							315b37a47343d5c37c8e6bac975edfdeeffc357b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provider-stg3.liveandworkwell.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001631a148b9f000004030047304502201bf55e06745704b8400e70275bd1b4112de387fa2821183a95e5254c0ec3ac28022100b56a62c59c1c61e3bee588670454a207ea7b508e7bced42387aee70186ee3307007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001631a14874600000403004730450220429276dfa6e6d70e6d04f0c8150c2d66dac140c47b3d2096f882f6363b440b2c02210092338e591bd0438abd5ab0a8ab1b78aad640ea97f7de3c210c210a91c791be91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0023f38f88d4ad85c8d6681a2105233bdfde1999e9b7bcaf14152b3c3bc372af68d96790cf1952ca85cb0b244e751ec06ed63ab4d072faac4b7d093801e9d8d85700c96c8dc19fe4399e13ce66c4090d201419831394724281cb85e4b51b1f973ab6a87c932618de7d7f22667e6a3b042fbc9c5301f317e51348fb03fed9c20b69f6ac99f4ff183d775de41cca5d587427556d9f42ad69d49ba8d30dd045f13b3851b025c844a52674ce7941cc4b84ed3528e7bb587650eb9c141193613e312135f3fd061e7be1c792746a7bb89c7997bcb4f2517b91f70d724c15ba42fd05a832d1c8eaa471a81276ae602db289d4ff1cdf9e526461104e54f231c406b2c0032b