owa.hmhs.com

- HM Health Solutions -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6b:9b:e7:38:5e:9d:d8:b7:9d:85:b6:19:48:ed:ce:8e was issued on by Entrust, Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HM Health Solutions

Organization: HM Health Solutions
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6b:9b:e7:38:5e:9d:d8:b7:9d:85:b6:19:48:ed:ce:8e
Serial Number (int): 143036891264736856712951496662877851278
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ac:67:cb:40:a9:9c:1a:9e:1f:d4:67:af:ab:24:d5:34:0e:f5:44:6f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e4:a6:fc:72:db:71:73:5b:14:24:84:75:a9:86:1d:0a:57:86:7f:5c
Fingerprint (sha256): 78:f9:c4:33:03:41:7b:df:64:48:55:7b:89:fd:6a:68:12:7a:4d:e5:83:3d:cc:0a:8d:44:87:da:be:97:33:0b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate owa.hmhs.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.hmhs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.hmhs.com
AutoDiscover.highmark.com
AutoDiscover.ahn.org
AutoDiscover.wpahs.org
AutoDiscover.ucci.com
AutoDiscover.highmarkhealth.org
AutoDiscover.hminsurancegroup.com
AutoDiscover.hmig.com
AutoDiscover.thryvedigital.com
AutoDiscover.goengen.com
mail.hmhs.com
autodiscover.hmhs.com
owa.ahn.org
mail.hmhealthsolutions.com
owa.hmhealthsolutions.com
mailhub.hmhs.com
mailhub.highmark.com
mailhub.wpahs.org
mailhub.ahn.org
mailhub.goengen.com
autodiscover.hmhealthsolutions.com
owa.highmark.com

Other certificates including the domain name hmhs.com

(limited to 100 certificates)
apiwebqa.hmhs.com
apiqa.hmhs.com
m-chemical.deepscholar.app
static.hmhs.com
apiportal.hmhs.com
statictest.hmhs.com
mbrcdn.hmhs.com
csportalutilities.hmhs.com
apianmqa-secured.hmhs.com
client.hmhs.com
partnerstest.hmhs.com
oauth.hmhs.com
api.hmhs.com
www.hmhealthsolutions.com
status.hmhs.com
cmsoauth.hmhs.com
jcs-tenv3.opservices.hmhs.com
mrfdata.hmhs.com
mftpwdreset.hmhs.com
www.hmhealthsolutions.com
myehsportal.hmhs.com
syncp-test.hmhs.com
ghptest.hmhs.com
apiweb.hmhs.com
myehsportaltenv2.hmhs.com
hmbrdsfp09.highmark.com
mft-test.hmhs.com
www.meinnovations.in
syncp-test.hmhs.com
apiportalqa.hmhs.com
ftp.highmark.com
apianmqa.hmhs.com
api.hmhs.com
myehsportalcontenttenv3.hmhs.com
hms-uat.hmhs.com
apiint.hmhs.com
test.status.hmhs.com
mft.hmhs.com
prod.opservices.hmhs.com
entrustapi.hmhs.com
csportalutilities.hmhs.com
hms-pve.hmhs.com
syncp-dev.hmhs.com
hhotest.hmhs.com
service.hmhs.com
mail.highmark.com
hho.hmhs.com
myehsportalcontent.hmhs.com
partners.hmhs.com
hhotest.hmhs.com
hho.hmhs.com
ghp.hmhs.com
syncp-dev.hmhs.com
service.hmhs.com
myehsportal.hmhs.com
mftpwdreset-test.hmhs.com
lyncwebextBR.hmhs.com
apimgrqa.hmhs.com
apiqa.hmhs.com
ftp.highmark.com
owa.hmhs.com
mrfdata.hmhs.com
dev.cdn.hmhs.com
wvfhtest.hmhs.com
myehsportaltenv3.hmhs.com
mail.hmhs.com
www.hmhealthsolutions.com
apimgr.hmhs.com
static.hmhs.com
apiintqa.hmhs.com
mrfdata.hmhs.com
ghptest.hmhs.com
owa.hmhs.com
myehsportal.hmhs.com
www.hmhealthsolutions.com
mail.hmhs.com
status.hmhs.com
owa.hmhs.com
syncp.hmhs.com
lyncaccess1.hmhs.com
apiportalqa-secured.hmhs.com
cmsoauthqa.hmhs.com
cmsapiportal.hmhs.com
oauthqa.hmhs.com
lyncwebextBR.hmhs.com
apiint.hmhs.com
client.hmhs.com
client.hmhs.com
sni.cloudflaressl.com
dev.cdn.hmhs.com
wvfh.hmhs.com
fedsvc4.hmhs.com
myehsportaltenvb.hmhs.com
wvfh.hmhs.com
static.hmhs.com
apiweb.hmhs.com
statictest.hmhs.com
static.hmhs.com
static.hmhs.com
ftp.highmark.com

Certificate

The complete raw certificate details for owa.hmhs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgIQa5vnOF6d2LedhbYZSO3OjjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAyMDUyMTM2NDJaFw0yNTAyMDUyMTM2NDFaMG4xCzAJBgNVBAYTAlVTMRUwEwYD
VQQIEwxQZW5uc3lsdmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxHDAaBgNVBAoT
E0hNIEhlYWx0aCBTb2x1dGlvbnMxFTATBgNVBAMTDG93YS5obWhzLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM3NwDUlqqfj1g25J3kXQAH7YpnI
S8jTZzwDSNcpTyDRgo2uWcDs6ZwRe6rCf+JJ4BYTV+1hZ8rm55Jk6QDF0X1OWKHZ
qSQus2LsPfE5VIh7qV7IdWQc39aBm//OeyGa0FhHDYOibFeJpITTfiUhRI1C/k8e
cgtTfk3G71Gz2CdWnLdDZbV9TZS6lVh3x3hPF4CWaHCjoBjoq9gl3Bnx0hcPyRqU
AfgtR/Zmao0crYxfMfL30X69QSM7AtWAwhqlo0Bb7/+Aek+hiJKuO94F4WQgPuKP
kYEJefx59VnYsEIxoyBkxQXlmhCJbO9yDQyhACC8ch3TxievBgX2QkobRe0CAwEA
AaOCA18wggNbMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKxny0CpnBqeH9Rnr6sk
1TQO9URvMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUF
BwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYI
KwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNl
cjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVs
MWsuY3JsMIICEQYDVR0RBIICCDCCAgSCDG93YS5obWhzLmNvbYIZQXV0b0Rpc2Nv
dmVyLmhpZ2htYXJrLmNvbYIUQXV0b0Rpc2NvdmVyLmFobi5vcmeCFkF1dG9EaXNj
b3Zlci53cGFocy5vcmeCFUF1dG9EaXNjb3Zlci51Y2NpLmNvbYIfQXV0b0Rpc2Nv
dmVyLmhpZ2htYXJraGVhbHRoLm9yZ4IhQXV0b0Rpc2NvdmVyLmhtaW5zdXJhbmNl
Z3JvdXAuY29tghVBdXRvRGlzY292ZXIuaG1pZy5jb22CHkF1dG9EaXNjb3Zlci50
aHJ5dmVkaWdpdGFsLmNvbYIYQXV0b0Rpc2NvdmVyLmdvZW5nZW4uY29tgg1tYWls
LmhtaHMuY29tghVhdXRvZGlzY292ZXIuaG1ocy5jb22CC293YS5haG4ub3Jnghpt
YWlsLmhtaGVhbHRoc29sdXRpb25zLmNvbYIZb3dhLmhtaGVhbHRoc29sdXRpb25z
LmNvbYIQbWFpbGh1Yi5obWhzLmNvbYIUbWFpbGh1Yi5oaWdobWFyay5jb22CEW1h
aWxodWIud3BhaHMub3Jngg9tYWlsaHViLmFobi5vcmeCE21haWxodWIuZ29lbmdl
bi5jb22CImF1dG9kaXNjb3Zlci5obWhlYWx0aHNvbHV0aW9ucy5jb22CEG93YS5o
aWdobWFyay5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjATBgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3pYwRADcJf63q2c8ua5GudygMHdnRGG
I2tMLLetSNNzYo8FXjYVjVLTHseqBpJ/vn08WCOHGp+jp55+y0HkEveZTUzBkWXo
RxMoykHbpVXZRmmg+POgEBemIl3Fx/WwzEkHoqO8LOqVfcClJWMq6cn+GyWldKYD
+kN2EfQRuaWKDVxcyNLYYa/mrVcTD3rTezSD1jvfhWoqOQckpTCTKUe82SZxtsOq
7TumjiwR6D+tVjvm0OhrPNlvsLjx5falL7A/mLwe3Zy0ZSZ3KCH6EQkvZw7K+WfC
YGnvMsX54YwTVHu1cwBejMXGnD460SzqGbS3DLAXDyPTWR0/Z6NIrg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc3ANSWqp+PWDbkneRdA
AftimchLyNNnPANI1ylPINGCja5ZwOzpnBF7qsJ/4kngFhNX7WFnyubnkmTpAMXR
fU5YodmpJC6zYuw98TlUiHupXsh1ZBzf1oGb/857IZrQWEcNg6JsV4mkhNN+JSFE
jUL+Tx5yC1N+TcbvUbPYJ1act0NltX1NlLqVWHfHeE8XgJZocKOgGOir2CXcGfHS
Fw/JGpQB+C1H9mZqjRytjF8x8vfRfr1BIzsC1YDCGqWjQFvv/4B6T6GIkq473gXh
ZCA+4o+RgQl5/Hn1WdiwQjGjIGTFBeWaEIls73INDKEAILxyHdPGJ68GBfZCShtF
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143036891264736856712951496662877851278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 21:36:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-05 21:36:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HM Health Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.hmhs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25980312024374436560244501389070120043181550752820993434977892526071635605579963973917216875582811125800826244566893185293312515037955816406677181736387508657585486221045317949191408980942955095851246141278596494880475359830602576867274734158761800758841444981559860838308891214586440428718170611706817566936393399956466399819888341504908718622058960428936547405297533333664291777836611638421364338969540591356098982136005177484078418880665769435857999067733071585999323253297803090839936107721447031144327968854745677281853818736624399162405066677561611422699630022652954108774730726735591375371387557854466180597229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac67cb40a99c1a9e1fd467afab24d5340ef5446f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (520 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.highmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.ahn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.wpahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.ucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.highmarkhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.hminsurancegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.hmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.thryvedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.goengen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.ahn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hmhealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.hmhealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhub.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhub.highmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhub.wpahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhub.ahn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhub.goengen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hmhealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.highmark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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