SSL certificate
TLSv1.2uhc.com · 20.80.218.166:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=US ST=Minnesota O=UnitedHealth Group Inc. CN=www.uhc.com
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
- Valid from
- 2026-09-17T00:00:00+00:00
- Expires
- 2027-04-03T23:59:59+00:00
- Days remaining
- 190
- Serial (hex)
- 056727EE64A61E0E95466E5743FA5B1E
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:www.uhc.com, DNS:accountablecareanswers.com, DNS:aon.uhc.com, DNS:assets.uhc.com, DNS:beasmartpatient.com, DNS:blog.medicaremadeclear.com, DNS:blog.stage-medicaremadeclear.uhc.com, DNS:brand.uhc.com, DNS:broker.uhc.com, DNS:compraplanesaca.com, DNS:consultant.uhc.com, DNS:designwithcare.com, DNS:dev-uhcexchange.uhc.com, DNS:digital.uhc.com, DNS:e-i.uhc.com, DNS:ei-ams-origin.uhc.com, DNS:ei-ams-stg-origin.uhc.com, DNS:ei-ams.uhc.com, DNS:ei-develop.uhc.com, DNS:ei-green.uhc.com, DNS:ei-qa.uhc.com, DNS:ei-stage.uhc.com, DNS:employer.uhc.com, DNS:engage.uhc.com, DNS:es-uhc-stage.uhc.com, DNS:es.uhc.com, DNS:everypregnancy.com, DNS:getuhcexchange.com, DNS:green.uhc.com, DNS:healthinnumbers.com, DNS:healthyatcola.com, DNS:m.prod-app.uhc.com, DNS:m.uhc.com, DNS:medicareexplicado.com, DNS:medicaremadeclear.com, DNS:mercer.uhc.com, DNS:mychoicenotchance.com, DNS:newsroom-stage.uhc.com, DNS:newsroom.uhc.com, DNS:offline-blog.medicaremadeclear.com, DNS:offline-medicaremadeclear.uhc.com, DNS:onenetppo.com, DNS:prod-app.uhc.com, DNS:retiree-ams-origin.uhc.com, DNS:retiree-ams-stg-origin.uhc.com, DNS:retiree-ams.uhc.com, DNS:retiree-dev.uhc.com, DNS:retiree-green.uhc.com, DNS:retiree-qa.uhc.com, DNS:retiree-stage.uhc.com, DNS:retiree.uhc.com, DNS:shopaffordablecareplans.com, DNS:shopuhcacaplans.com, DNS:source4women.com, DNS:stage-medicaremadeclear.uhc.com, DNS:stage-uhcexchange.uhc.com, DNS:test-uhcexchange.uhc.com, DNS:uhc-ams-offline.uhc.com, DNS:uhc-ams-stg-offline.uhc.com, DNS:uhc-ctc.uhc.com, DNS:uhc-dev.uhc.com, DNS:uhc-elr.uhc.com, DNS:uhc-gpd-green.uhc.com, DNS:uhc-gpd-preview.uhc.com, DNS:uhc-qa.uhc.com, DNS:uhc-stage-aws.uhc.com, DNS:uhc-stage.uhc.com, DNS:uhc.com, DNS:uhcacaplans.com, DNS:uhcexchange.com, DNS:uhcgenerations.com, DNS:uhclatino.com, DNS:uhcpremium.com, DNS:uhcretiree.com, DNS:uhctogether.com, DNS:unitedhealthcare.com, DNS:unitedhealthpremium.com, DNS:www-ams.uhc.com, DNS:www-aws.uhc.com, DNS:www.accountablecareanswers.com, DNS:www.beasmartpatient.com, DNS:www.brand.uhc.com, DNS:www.compraplanesaca.com, DNS:www.designwithcare.com, DNS:www.engage.uhc.com, DNS:www.everypregnancy.com, DNS:www.getuhcexchange.com, DNS:www.healthinnumbers.com, DNS:www.healthyatcola.com, DNS:www.m.prod-app.uhc.com, DNS:www.m.uhc.com, DNS:www.medicareexplicado.com, DNS:www.medicaremadeclear.com, DNS:www.mychoicenotchance.com, DNS:www.offline-medicaremadeclear.uhc.com, DNS:www.onenetppo.com, DNS:www.prod-app.uhc.com, DNS:www.shopaffordablecareplans.com, DNS:www.shopuhcacaplans.com, DNS:www.source4women.com, DNS:www.stage-medicaremadeclear.uhc.com, DNS:www.uhcacaplans.com, DNS:www.uhcexchange.com, DNS:www.uhcgenerations.com, DNS:www.uhclatino.com, DNS:www.uhcpremium.com, DNS:www.uhcretiree.com, DNS:www.uhctogether.com, DNS:www.unitedhealthcare.com, DNS:www.unitedhealthpremium.com
SHA-256 fingerprint
2A:02:8B:A2:6F:E1:63:67:15:B1:47:B0:02:AE:BD:85:E1:03:21:1A:39:1D:23:DD:60:C8:2F:CE:89:0E:D3:29
Certificate extensions & PEM
- authorityKeyIdentifier
- E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
- subjectKeyIdentifier
- 83:4E:50:9D:39:C5:61:86:CC:47:81:57:3F:43:FD:10:8E:01:CE:20
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.6449.1.2.1.3.4 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCAOVR36.crt OCSP - URI:http://ocsp.sectigo.com
- subjectAltName
- DNS:www.uhc.com, DNS:accountablecareanswers.com, DNS:aon.uhc.com, DNS:assets.uhc.com, DNS:beasmartpatient.com, DNS:blog.medicaremadeclear.com, DNS:blog.stage-medicaremadeclear.uhc.com, DNS:brand.uhc.com, DNS:broker.uhc.com, DNS:compraplanesaca.com, DNS:consultant.uhc.com, DNS:designwithcare.com, DNS:dev-uhcexchange.uhc.com, DNS:digital.uhc.com, DNS:e-i.uhc.com, DNS:ei-ams-origin.uhc.com, DNS:ei-ams-stg-origin.uhc.com, DNS:ei-ams.uhc.com, DNS:ei-develop.uhc.com, DNS:ei-green.uhc.com, DNS:ei-qa.uhc.com, DNS:ei-stage.uhc.com, DNS:employer.uhc.com, DNS:engage.uhc.com, DNS:es-uhc-stage.uhc.com, DNS:es.uhc.com, DNS:everypregnancy.com, DNS:getuhcexchange.com, DNS:green.uhc.com, DNS:healthinnumbers.com, DNS:healthyatcola.com, DNS:m.prod-app.uhc.com, DNS:m.uhc.com, DNS:medicareexplicado.com, DNS:medicaremadeclear.com, DNS:mercer.uhc.com, DNS:mychoicenotchance.com, DNS:newsroom-stage.uhc.com, DNS:newsroom.uhc.com, DNS:offline-blog.medicaremadeclear.com, DNS:offline-medicaremadeclear.uhc.com, DNS:onenetppo.com, DNS:prod-app.uhc.com, DNS:retiree-ams-origin.uhc.com, DNS:retiree-ams-stg-origin.uhc.com, DNS:retiree-ams.uhc.com, DNS:retiree-dev.uhc.com, DNS:retiree-green.uhc.com, DNS:retiree-qa.uhc.com, DNS:retiree-stage.uhc.com, DNS:retiree.uhc.com, DNS:shopaffordablecareplans.com, DNS:shopuhcacaplans.com, DNS:source4women.com, DNS:stage-medicaremadeclear.uhc.com, DNS:stage-uhcexchange.uhc.com, DNS:test-uhcexchange.uhc.com, DNS:uhc-ams-offline.uhc.com, DNS:uhc-ams-stg-offline.uhc.com, DNS:uhc-ctc.uhc.com, DNS:uhc-dev.uhc.com, DNS:uhc-elr.uhc.com, DNS:uhc-gpd-green.uhc.com, DNS:uhc-gpd-preview.uhc.com, DNS:uhc-qa.uhc.com, DNS:uhc-stage-aws.uhc.com, DNS:uhc-stage.uhc.com, DNS:uhc.com, DNS:uhcacaplans.com, DNS:uhcexchange.com, DNS:uhcgenerations.com, DNS:uhclatino.com, DNS:uhcpremium.com, DNS:uhcretiree.com, DNS:uhctogether.com, DNS:unitedhealthcare.com, DNS:unitedhealthpremium.com, DNS:www-ams.uhc.com, DNS:www-aws.uhc.com, DNS:www.accountablecareanswers.com, DNS:www.beasmartpatient.com, DNS:www.brand.uhc.com, DNS:www.compraplanesaca.com, DNS:www.designwithcare.com, DNS:www.engage.uhc.com, DNS:www.everypregnancy.com, DNS:www.getuhcexchange.com, DNS:www.healthinnumbers.com, DNS:www.healthyatcola.com, DNS:www.m.prod-app.uhc.com, DNS:www.m.uhc.com, DNS:www.medicareexplicado.com, DNS:www.medicaremadeclear.com, DNS:www.mychoicenotchance.com, DNS:www.offline-medicaremadeclear.uhc.com, DNS:www.onenetppo.com, DNS:www.prod-app.uhc.com, DNS:www.shopaffordablecareplans.com, DNS:www.shopuhcacaplans.com, DNS:www.source4women.com, DNS:www.stage-medicaremadeclear.uhc.com, DNS:www.uhcacaplans.com, DNS:www.uhcexchange.com, DNS:www.uhcgenerations.com, DNS:www.uhclatino.com, DNS:www.uhcpremium.com, DNS:www.uhcretiree.com, DNS:www.uhctogether.com, DNS:www.unitedhealthcare.com, DNS:www.unitedhealthpremium.com
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 17 14:02:02.758 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:A4:CA:AC:3F:04:F2:11:6B:5B:6C:BB: 69:F1:A3:37:79:B7:CC:5C:1C:01:F7:0C:36:77:68:05: 8B:37:BF:34:E0:02:21:00:D5:82:D1:0F:4B:77:0D:C3: 01:E4:48:70:6C:9E:6E:A5:EA:08:42:47:D2:64:CD:34: 43:2C:A1:66:D5:34:68:13 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Sep 17 14:02:03.066 2026 GMT Extensions: 00:00:05:00:04:CA:B3:6D Signature : ecdsa-with-SHA256 30:46:02:21:00:E0:13:86:85:8E:4E:27:14:E4:DE:96: CC:95:9D:99:0A:E4:44:BD:32:53:70:AB:74:9B:71:53: 01:FD:04:69:CA:02:21:00:BE:4B:3A:BB:11:97:4C:9B: 21:E7:7D:DD:4A:89:55:A9:D3:6E:3A:6C:B3:64:86:6B: 48:C5:81:28:FB:D5:64:9D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 46:A2:39:67:C6:0D:B6:46:87:C6:6F:3D:F9:99:94:76: 93:A6:A6:11:20:84:57:D5:55:E7:E3:D0:A1:D9:B6:46 Timestamp : Sep 17 14:02:03.247 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:0C:A0:84:82:02:06:88:73:53:86:89:B9: 78:94:D1:FE:8A:CE:56:52:53:88:17:FF:AC:AA:F3:06: 98:74:A8:75:02:21:00:D1:79:B5:47:89:F1:AA:F1:03: 9C:46:67:0D:AD:9B:77:F4:00:AE:1C:94:02:0F:8E:12: 1D:66:0D:4D:25:A9:02
-----BEGIN CERTIFICATE----- MIIQUTCCDrmgAwIBAgIQBWcn7mSmHg6VRm5XQ/pbHjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjM2 MB4XDTI2MDkxNzAwMDAwMFoXDTI3MDQwMzIzNTk1OVowWTELMAkGA1UEBhMCVVMx EjAQBgNVBAgTCU1pbm5lc290YTEgMB4GA1UEChMXVW5pdGVkSGVhbHRoIEdyb3Vw IEluYy4xFDASBgNVBAMTC3d3dy51aGMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3wxsiwDvQPTJY2QGRoOGAS5GpWn8L00gNVlyWIIe3Ub++5JN 0YAYyKu+yOrOxvNPrwnlAJgkW5Kc+mqqVzfSFd/g+yF0qfZRNC03QY0VlGjcFsAq rqlg6ZyUi/OAjq7EDboVoPsC8BufCBic0XUQkmj/hTI4JOLhDz6/znJeC+YQZTtc uaWvQqgmnbFYuAUXd72sNw0I8IwutYREiZwvMP3/2V2TBbZmbzLfUlpEHT+nHVyO bXisyS5x9ftZYvCT/oFtFiqNapbVvGYlyb0b6iPtHyc6BPl7lxCJgdWKqm2FCbDQ Z4uZIzVkvVanf9oFKAU6EJbZmO0XCgwGa7UsEQIDAQABo4IMjDCCDIgwHwYDVR0j BBgwFoAU42Z0u3BojSxdTg6mSo+bNyKcgpIwHQYDVR0OBBYEFINOUJ05xWGGzEeB Vz9D/RCOAc4gMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQM MAoGCCsGAQUFBwMBMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYB BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBUBgNVHR8E TTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNT ZXJ2ZXJBdXRoZW50aWNhdGlvbkNBT1ZSMzYuY3JsMIGEBggrBgEFBQcBAQR4MHYw TwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1Ymxp Y1NlcnZlckF1dGhlbnRpY2F0aW9uQ0FPVlIzNi5jcnQwIwYIKwYBBQUHMAGGF2h0 dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIJXAYDVR0RBIIJUzCCCU+CC3d3dy51aGMu Y29tghphY2NvdW50YWJsZWNhcmVhbnN3ZXJzLmNvbYILYW9uLnVoYy5jb22CDmFz c2V0cy51aGMuY29tghNiZWFzbWFydHBhdGllbnQuY29tghpibG9nLm1lZGljYXJl bWFkZWNsZWFyLmNvbYIkYmxvZy5zdGFnZS1tZWRpY2FyZW1hZGVjbGVhci51aGMu Y29tgg1icmFuZC51aGMuY29tgg5icm9rZXIudWhjLmNvbYITY29tcHJhcGxhbmVz YWNhLmNvbYISY29uc3VsdGFudC51aGMuY29tghJkZXNpZ253aXRoY2FyZS5jb22C F2Rldi11aGNleGNoYW5nZS51aGMuY29tgg9kaWdpdGFsLnVoYy5jb22CC2UtaS51 aGMuY29tghVlaS1hbXMtb3JpZ2luLnVoYy5jb22CGWVpLWFtcy1zdGctb3JpZ2lu LnVoYy5jb22CDmVpLWFtcy51aGMuY29tghJlaS1kZXZlbG9wLnVoYy5jb22CEGVp LWdyZWVuLnVoYy5jb22CDWVpLXFhLnVoYy5jb22CEGVpLXN0YWdlLnVoYy5jb22C EGVtcGxveWVyLnVoYy5jb22CDmVuZ2FnZS51aGMuY29tghRlcy11aGMtc3RhZ2Uu dWhjLmNvbYIKZXMudWhjLmNvbYISZXZlcnlwcmVnbmFuY3kuY29tghJnZXR1aGNl eGNoYW5nZS5jb22CDWdyZWVuLnVoYy5jb22CE2hlYWx0aGlubnVtYmVycy5jb22C EWhlYWx0aHlhdGNvbGEuY29tghJtLnByb2QtYXBwLnVoYy5jb22CCW0udWhjLmNv bYIVbWVkaWNhcmVleHBsaWNhZG8uY29tghVtZWRpY2FyZW1hZGVjbGVhci5jb22C Dm1lcmNlci51aGMuY29tghVteWNob2ljZW5vdGNoYW5jZS5jb22CFm5ld3Nyb29t LXN0YWdlLnVoYy5jb22CEG5ld3Nyb29tLnVoYy5jb22CIm9mZmxpbmUtYmxvZy5t ZWRpY2FyZW1hZGVjbGVhci5jb22CIW9mZmxpbmUtbWVkaWNhcmVtYWRlY2xlYXIu dWhjLmNvbYINb25lbmV0cHBvLmNvbYIQcHJvZC1hcHAudWhjLmNvbYIacmV0aXJl ZS1hbXMtb3JpZ2luLnVoYy5jb22CHnJldGlyZWUtYW1zLXN0Zy1vcmlnaW4udWhj LmNvbYITcmV0aXJlZS1hbXMudWhjLmNvbYITcmV0aXJlZS1kZXYudWhjLmNvbYIV cmV0aXJlZS1ncmVlbi51aGMuY29tghJyZXRpcmVlLXFhLnVoYy5jb22CFXJldGly ZWUtc3RhZ2UudWhjLmNvbYIPcmV0aXJlZS51aGMuY29tghtzaG9wYWZmb3JkYWJs ZWNhcmVwbGFucy5jb22CE3Nob3B1aGNhY2FwbGFucy5jb22CEHNvdXJjZTR3b21l bi5jb22CH3N0YWdlLW1lZGljYXJlbWFkZWNsZWFyLnVoYy5jb22CGXN0YWdlLXVo Y2V4Y2hhbmdlLnVoYy5jb22CGHRlc3QtdWhjZXhjaGFuZ2UudWhjLmNvbYIXdWhj LWFtcy1vZmZsaW5lLnVoYy5jb22CG3VoYy1hbXMtc3RnLW9mZmxpbmUudWhjLmNv bYIPdWhjLWN0Yy51aGMuY29tgg91aGMtZGV2LnVoYy5jb22CD3VoYy1lbHIudWhj LmNvbYIVdWhjLWdwZC1ncmVlbi51aGMuY29tghd1aGMtZ3BkLXByZXZpZXcudWhj LmNvbYIOdWhjLXFhLnVoYy5jb22CFXVoYy1zdGFnZS1hd3MudWhjLmNvbYIRdWhj LXN0YWdlLnVoYy5jb22CB3VoYy5jb22CD3VoY2FjYXBsYW5zLmNvbYIPdWhjZXhj aGFuZ2UuY29tghJ1aGNnZW5lcmF0aW9ucy5jb22CDXVoY2xhdGluby5jb22CDnVo Y3ByZW1pdW0uY29tgg51aGNyZXRpcmVlLmNvbYIPdWhjdG9nZXRoZXIuY29tghR1 bml0ZWRoZWFsdGhjYXJlLmNvbYIXdW5pdGVkaGVhbHRocHJlbWl1bS5jb22CD3d3 dy1hbXMudWhjLmNvbYIPd3d3LWF3cy51aGMuY29tgh53d3cuYWNjb3VudGFibGVj YXJlYW5zd2Vycy5jb22CF3d3dy5iZWFzbWFydHBhdGllbnQuY29tghF3d3cuYnJh bmQudWhjLmNvbYIXd3d3LmNvbXByYXBsYW5lc2FjYS5jb22CFnd3dy5kZXNpZ253 aXRoY2FyZS5jb22CEnd3dy5lbmdhZ2UudWhjLmNvbYIWd3d3LmV2ZXJ5cHJlZ25h bmN5LmNvbYIWd3d3LmdldHVoY2V4Y2hhbmdlLmNvbYIXd3d3LmhlYWx0aGlubnVt YmVycy5jb22CFXd3dy5oZWFsdGh5YXRjb2xhLmNvbYIWd3d3Lm0ucHJvZC1hcHAu dWhjLmNvbYINd3d3Lm0udWhjLmNvbYIZd3d3Lm1lZGljYXJlZXhwbGljYWRvLmNv bYIZd3d3Lm1lZGljYXJlbWFkZWNsZWFyLmNvbYIZd3d3Lm15Y2hvaWNlbm90Y2hh bmNlLmNvbYIld3d3Lm9mZmxpbmUtbWVkaWNhcmVtYWRlY2xlYXIudWhjLmNvbYIR d3d3Lm9uZW5ldHBwby5jb22CFHd3dy5wcm9kLWFwcC51aGMuY29tgh93d3cuc2hv cGFmZm9yZGFibGVjYXJlcGxhbnMuY29tghd3d3cuc2hvcHVoY2FjYXBsYW5zLmNv bYIUd3d3LnNvdXJjZTR3b21lbi5jb22CI3d3dy5zdGFnZS1tZWRpY2FyZW1hZGVj bGVhci51aGMuY29tghN3d3cudWhjYWNhcGxhbnMuY29tghN3d3cudWhjZXhjaGFu Z2UuY29tghZ3d3cudWhjZ2VuZXJhdGlvbnMuY29tghF3d3cudWhjbGF0aW5vLmNv bYISd3d3LnVoY3ByZW1pdW0uY29tghJ3d3cudWhjcmV0aXJlZS5jb22CE3d3dy51 aGN0b2dldGhlci5jb22CGHd3dy51bml0ZWRoZWFsdGhjYXJlLmNvbYIbd3d3LnVu aXRlZGhlYWx0aHByZW1pdW0uY29tMIIBiAYKKwYBBAHWeQIEAgSCAXgEggF0AXIA dwAcn2gs6frwRWlQ+BuWiofd2zIQ2EzmyLLjglJKxM9ZnwAAAaCvrKaGAAAEAwBI MEYCIQCkyqw/BPIRa1tsu2nxozd5t8xcHAH3DDZ3aAWLN7804AIhANWC0Q9Ldw3D AeRIcGyebqXqCEJH0mTNNEMsoWbVNGgTAH8AWW5sM4aUsllyolbIoOjdkEp26Ag9 2oc7AQg4KBQ87lkAAAGgr6ynugAIAAAFAATKs20EAwBIMEYCIQDgE4aFjk4nFOTe lsyVnZkK5ES9MlNwq3SbcVMB/QRpygIhAL5LOrsRl0ybIed93UqJVanTbjpss2SG a0jFgSj71WSdAHYARqI5Z8YNtkaHxm89+ZmUdpOmphEghFfVVefj0KHZtkYAAAGg r6yobwAABAMARzBFAiAMoISCAgaIc1OGibl4lNH+is5WUlOIF/+sqvMGmHSodQIh ANF5tUeJ8arxA5xGZw2tm3f0AK4clAIPjhIdZg1NJakCMA0GCSqGSIb3DQEBCwUA A4IBgQCl+49bqH9Dft2Xn+NQ4U+iFSK1zpaDu6K7exHgfAa9qDjO3ebqPxd9y2gv eQMWzHfD0VwAuFLvDGNXVQl1TNpqjO2nxsO7t2BLFaMyDwQx/sUW72egCiaOHagd aYSVlyCX3Nwg7LauHGxcB+pi8xaWwIUoTGAF1GbBa05DPfeGZ+Xhnlp2J9B/py25 E7hONYMhHHquOy2wGV8MgIEnCXIz8TM0Dp+EwRNxzO2bpGZ9N7q15n9saarAzyPv HfeYfz/fcr6liTU0BoAX/wcyvy5x8y+DTkGjnJdtIc8iy751+JS4WgkdPWIj5KMw I59cST+0j2e9kYG599XmnRYdKCcRwCsIRcFH0MA2uoOmQu+d+EJPZYzAmtJ76oyp DeuYAQl1/dYNh6Gh9WuNDswFMEiitWUxpXtu911l0iRX45ppF+BkB9AzRxYa5UOX TubQRunFDEx+agcgLQdUQWd5C8ryjMnvS/QBXEpTHZ/PskWcxw+36Gbu9cXqeNko +QaEl64= -----END CERTIFICATE-----
Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-09-25T11:18:24+00:00
Server-presented chain · 3 additional certificates
Chain certificate 1
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA OV R36
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2036-03-21T23:59:59+00:00
- Days remaining
- 3465
- Serial (hex)
- 2C1A3C76E943DDDDFF191B31890AED71
- Signature
- RSA-SHA384
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
65:42:D1:76:BE:D5:0F:19:3C:0C:E2:97:AE:44:EC:D8:A0:A8:6B:EC:2E:DE:68:27:69:34:40:59:B4:E7:85:30
Certificate extensions & PEM
- authorityKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- subjectKeyIdentifier
- E3:66:74:BB:70:68:8D:2C:5D:4E:0E:A6:4A:8F:9B:37:22:9C:82:92
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy Policy: 2.23.140.1.2.2
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE----- MIIGTDCCBDSgAwIBAgIQLBo8dulD3d3/GRsxiQrtcTANBgkqhkiG9w0BAQwFADBf MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgT1YgUjM2MIIBojANBgkqhkiG9w0B AQEFAAOCAY8AMIIBigKCAYEApkMtJ3R06jo0fceI0M52B7K+TyMeGcv2BQ5AVc3j lYt76TvHIu/nNe22W/RJXX9rWUD/2GE6GF5x0V4bsY7K3IeJ8E7+KzG/TGboySfD u+F52jqQBbY62ofhYjMeiAbLI02+FqwHeM8uIrUtcX8b2RCxF358TB0NHVccAXZc FYgZndZCeXxjuca7pJJ20LLUnXtgXcjAE1vY4WvbReW0W6mkeZyNGdmpTcFs5Y+s yy6LtE5Zocji9J9NlNnReox2RWVyEXpA1ChZ4gqN+ZpVSIQ0HBorVFbBKyhdZyEX gZgNSNtBRwxqwIzJePJhYd4ZUhO1vk+/uP3nwDk0p95q/j7naXNCSvESnrHPypaB WRK066nKfPRPi9m9kIOhMdYfS8giFRTcdgL24Ycilj7ecAK9Trh0VbjwouJ4WH+x bt47u68ZFCD/ac55I0DNHkCpaPruj6e9Rmr7K46wZDAYXuEAqB7tGG/jd6JAA+H2 O44CV98NRsU213f1kScIZntNAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQU42Z0u3BojSxdTg6mSo+bNyKcgpIw DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgIw VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA BZXWDHWC3cubb/e1I1kzi8lPFiK/ZUoH09ufmVOrc5ObYH/XKkWUexSPqRkwKFKr 7r8OuG+p7VNB8rifX6uopqKAgsvZtZsq7iAFw04To6vNcxeBt1Eush3cQ4b8nbQR MQLChgEAqwhuXp9P48T4QEBSksYav7+aFjNySsLYlPzNqVM3RNwvBdvp6vgDtGwc xlKQZVuuNVIaoYyls8swhxDeSHKpRdxRauTLZ+pl+wGvy0pnrLEJGSz9mOEmfbod e/XopR2NGqaHJ6bIjyxPu6UtyQGI26En7UAEozACrHz06Nx2jTAY9E6NeB6XuobE wLK025ZRmvglcURG1BrV24tGHHTgxCe8M3oGlpUSMTKQ2dkgljZVYt+gKdFtWELZ MuRdi+X3XsrR8LFz+aLUiDRfQqhmw3RxjIyVKvvu9UPYY1nsvxYmFnUSeM+2q1z/ iPUry+xDY9MC6+IhleKT094VKdFVp7LXH42+wvU+17lRolQ2mK2N/nBLVBwaIhib QXw4VYKwB86Bc6eS6iqsc94KEgD/U4VsjmgfhK+Xp4NM+VYzTTa3QeV3p8xOM0cw q1p8oZFA+OBcz3FYWpDIe5j0NWKlw9hXsTyPY/HeZUV59akskSOSRSmDfe8wJDPX 58uB9/7lud0G3x0pxQAcffP0ayKavNwDTw4UfJ34cEw= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Issuer
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2038-01-18T23:59:59+00:00
- Days remaining
- 4133
- Serial (hex)
- D27FBBC1DE359E5216AD6149586099C4
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
- authorityKeyIdentifier
- 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
- subjectKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy
- crlDistributionPoints
- Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR 8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34 MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr +vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1 BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0 S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24 RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1 VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb 9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2 Rnnyp58XRStJ -----END CERTIFICATE-----
Chain certificate 3
- Subject
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Issuer
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Valid from
- 2010-02-01T00:00:00+00:00
- Expires
- 2038-01-18T23:59:59+00:00
- Days remaining
- 4133
- Serial (hex)
- 01FD6D30FCA3CA51A81BBC640E35032D
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
Certificate extensions & PEM
- subjectKeyIdentifier
- 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
- keyUsage
- Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
-----BEGIN CERTIFICATE----- MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAw MjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNV BAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCAEmUXNg7D2wiz0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B 3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2jY0K2dvKpOyuR+OJv0OwWIJAJPuLodMkY tJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFnRghRy4YUVD+8M/5+bJz/ Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O+T23LLb2 VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT 79uq/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6 c0Plfg6lZrEpfDKEY1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmT Yo61Zs8liM2EuLE/pDkP2QKe6xJMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97l c6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC/QV9AqURE9JnnV4ee UB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeE Hg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8G A1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPF Up/L+M+ZBn8b2kMVn54CVVeWFPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KO VWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ7l8wXEskEVX/JJpuXior7gtNn3/3 ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQEg9zKC7F4iRO/Fjs 8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM8WcR iQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYze Sf7dNXGiFSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZ XHlKYC6SQK5MNyosycdiyA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/ qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9cJ2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRB VXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGwsAvgnEzDHNb842m1R0aB L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG jjxDah2nGN59PRbxYvnKkKj9 -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.