Certificate Summary:

Subject: www.kaiserpermanente.org
Issuer: Sectigo RSA Organization Validation Secure Server CA
Expiration: 2024-03-21 23:59:59 UTC
Key Identifier: 97:9D:B4:17:8D:DF:42:9F:CC:C8:D7:09:48:2D:44:56:8C:6B:8E:C9

Download and Install

Received at FYIcenter.com on: 2023-08-29

Certificate Detailed Information:

Name:
/C=US/ST=California/O=Kaiser Foundation Health Plan, Inc./CN=www.kaiserp
ermanente.org

Subject: 
   Common Name (CN): www.kaiserpermanente.org
   Organizational Unit Name (OU): 
   Organization Name (O): Kaiser Foundation Health Plan, Inc.
   Locality Name (L): 
   State or Province Name (ST): California
   Country Name (C): US
   Email Address: 
Issuer: 
   Common Name (CN): Sectigo RSA Organization Validation Secure Server CA
   Organizational Unit Name (OU): 
   Organization Name (O): Sectigo Limited
   Locality Name (L): Salford
   State or Province Name (ST): Greater Manchester
   Country Name (C): GB
   Email Address: 
Valid From: Wed, 22 Mar 2023 00:00:00 +0000 
Valid To: Thu, 21 Mar 2024 23:59:59 +0000 
Serial Number: 117144244026350672252517632397345715052 
Hash: e641e35a 
Version: 2 
Signature Type: sha256WithRSAEncryption 
Purposes:  
   SSL client 
   SSL server 
   Netscape SSL server 
   S/MIME signing 
   S/MIME encryption 
   CRL signing 
   Any Purpose 
   OCSP helper 
   Time Stamp signing 
Extensions:  
   authorityKeyIdentifier:
      keyid:17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
 
   subjectKeyIdentifier:
      97:9D:B4:17:8D:DF:42:9F:CC:C8:D7:09:48:2D:44:56:8C:6B:8E:C9 
   keyUsage:
      Digital Signature, Key Encipherment 
   basicConstraints:
      CA:FALSE 
   extendedKeyUsage:
      TLS Web Server Authentication, TLS Web Client Authentication 
   certificatePolicies:
      Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
  CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.2
 
   crlDistributionPoints:
      
Full Name:
  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
 
   authorityInfoAccess:
      CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
 
   ct_precert_scts:
      Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
    Timestamp : Mar 22 03:17:45.109 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:45:02:20:4B:A8:18:DA:24:76:58:B5:7B:67:16:2C:
                D0:C0:17:E2:9B:B9:7A:FE:08:2C:01:F4:6C:E2:12:B4:
                4F:97:77:B9:02:21:00:D7:16:81:0F:58:67:0B:5D:BC:
                C2:EB:49:93:40:FA:9C:37:96:7B:DD:96:31:88:AB:83:
                C4:88:8E:C9:0D:77:E8
Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
    Timestamp : Mar 22 03:17:45.198 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:45:02:20:5F:DC:5F:8D:E4:9C:40:C2:D2:FE:B4:F2:
                A3:0F:82:DC:A9:96:19:2F:C8:7F:C2:91:4C:81:5A:84:
                A4:03:2A:99:02:21:00:E7:CA:CA:1A:1E:0B:C8:50:2A:
                44:4E:D6:49:C3:97:AE:98:7F:64:5A:2E:8E:34:5D:3D:
                F6:FD:01:A3:2F:1A:68
Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
    Timestamp : Mar 22 03:17:45.214 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:45:02:21:00:CC:CC:00:95:83:BF:67:DA:48:52:34:
                BD:BF:02:7B:5F:4E:C1:70:D0:4E:02:2C:53:32:44:36:
                18:AA:C1:D3:AD:02:20:31:61:C0:BE:8E:57:35:C6:18:
                2E:C1:E1:3C:59:24:EE:C8:84:EB:65:F0:E7:9F:DF:75:
                1E:99:FD:26:61:0C:2D 
   subjectAltName:
      DNS:www.kaiserpermanente.org, DNS:brokers.kaiserpermanente.com, DNS:brokers.kaiserpermanente.net, DNS:brokers.kaiserpermanente.org, DNS:brokers.kp.com, DNS:brokers.kp.net, DNS:brokers.kp.org, DNS:employers.kaiserpermanente.com, DNS:employers.kaiserpermanente.net, DNS:employers.kaiserpermanente.org, DNS:employers.kp.com, DNS:employers.kp.net, DNS:employers.kp.org, DNS:kaiserpermanente.com, DNS:kaiserpermanente.net, DNS:kaiserpermanente.org, DNS:kp.com, DNS:kp.net, DNS:kp.org, DNS:members.kaiserpermanente.com, DNS:members.kaiserpermanente.net, DNS:members.kaiserpermanente.org, DNS:members.kp.com, DNS:members.kp.net, DNS:members.kp.org, DNS:newsmedia.kaiserpermanente.com, DNS:newsmedia.kaiserpermanente.net, DNS:newsmedia.kaiserpermanente.org, DNS:newsmedia.kp.com, DNS:newsmedia.kp.net, DNS:newsmedia.kp.org, DNS:prospectiveemployers.kaiserpermanente.com, DNS:prospectiveemployers.kaiserpermanente.net, DNS:prospectiveemployers.kp.com, DNS:prospectiveemployers.kp.net, DNS:prospectiveemployers.kp.org, DNS:prospectivemembers.kaiserpermanente.com, DNS:prospectivemembers.kaiserpermanente.net, DNS:prospectivemembers.kaiserpermanente.org, DNS:prospectivemembers.kp.com, DNS:prospectivemembers.kp.net, DNS:prospectivemembers.kp.org, DNS:www.brokers.kaiserpermanente.org, DNS:www.brokers.kp.org, DNS:www.employers.kaiserpermanente.org, DNS:www.employers.kp.org, DNS:www.kaiserpermanente.com, DNS:www.kaiserpermanente.net, DNS:www.kp.com, DNS:www.kp.net, DNS:www.kp.org, DNS:www.members.kaiserpermanente.org, DNS:www.members.kp.org, DNS:www.newsmedia.kaiserpermanente.org, DNS:www.newsmedia.kp.org, DNS:www.prospectiveemployers.kaiserpermanente.org, DNS:www.prospectiveemployers.kp.org, DNS:www.prospectivemembers.kaiserpermanente.org, DNS:www.prospectivemembers.kp.org 

Certificate in PEM Format:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Related Certificate(s):

ID      Subject          Issuer           Expiration Key Identifier   Relation   
        www.kaiserperma… Sectigo RSA Org… 2024-03-21 979DB4178DDF429… This Cert
        --------------------------------------------------
6821    Sectigo RSA Org… USERTrust RSA C… 2030-12-31 17D9D6252767F93… Parent Cert

Public Key Detailed Information:

Key Details:
   Type: RSA
   Size (bits): 2048
   Modulus (n): 
a303f063b00b678507bae38a337145beebc1c074ec73b3b168a83592d4a488c2
505156d9e7f0e09f6828139adc1cad2875de47d3a2f048cbf21e32c7a790c147
35200e61f9f0432d58ecd1f977d7382dce1b22f87d58101e74a01ab131c1c084
d454344007aad2656d9ca83f74e9acc4ee2bd5c3f15fec4d4c9b8afd54b7f28e
cd4ff50020d383b14be7393edc852f3c65aaff0f5e05673edb072564c68efb39
6005c59e09d4560d470cc03d891de9bb325aa0476e094deea839a87fddb3e954
3c836345f9ef08e2abd752f8d87dcca8b9ba43b040a0f3e3a5fe4aefbc306e29
120aa7f5e68360e17ad42e28cd5c186f23a11558996506d3776dfcfa34426941
   Public Exponent (e): 65537 (0x010001)

Public Key in PEM Format:

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPwY7ALZ4UHuuOKM3FF
vuvBwHTsc7OxaKg1ktSkiMJQUVbZ5/Dgn2goE5rcHK0odd5H06LwSMvyHjLHp5DB
RzUgDmH58EMtWOzR+XfXOC3OGyL4fVgQHnSgGrExwcCE1FQ0QAeq0mVtnKg/dOms
xO4r1cPxX+xNTJuK/VS38o7NT/UAINODsUvnOT7chS88Zar/D14FZz7bByVkxo77
OWAFxZ4J1FYNRwzAPYkd6bsyWqBHbglN7qg5qH/ds+lUPINjRfnvCOKr11L42H3M
qLm6Q7BAoPPjpf5K77wwbikSCqf15oNg4XrULijNXBhvI6EVWJllBtN3bfz6NEJp
QQIDAQAB
-----END PUBLIC KEY-----

Identical or Similar Keys: We found that the public key in this certificate matches key(s) recorded previously.

ID      Type Size Pri/Pub Key Identifier   Date       Comparison 
18916   RSA  2048 Public  979DB4178DDF429… 2023-08-29 Same Key ID