idfederation.merck.com

- Merck & Co., Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number eb:96:a3:4e:71:4e:0a:54:9e:9d:26:eb:2b:77:d4:2e was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Merck & Co., Inc.

Organization: Merck & Co., Inc.
Organization unit: Data & System Protection
Organization unit: Hosted by Merck Sharp & Dohme Corp.
Organization unit: PlatinumSSL
Address: 2000 Galloping Hill Rd.
Postal code: 07033
State / Province: New Jersey
Locality: Kenilworth
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): eb:96:a3:4e:71:4e:0a:54:9e:9d:26:eb:2b:77:d4:2e
Serial Number (int): 313150735785863676719934268264058180654
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c4:1a:02:8f:7b:5a:77:f1:10:84:d8:be:af:77:b3:a1:82:ae:e5:e4
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): d5:e1:67:81:3e:7d:1c:b7:3a:a4:b3:c3:31:34:a1:2a:0c:30:fb:79
Fingerprint (sha256): 00:59:9d:1a:b3:b4:58:81:0f:ab:ba:d5:a2:d5:2b:fb:e1:57:61:d2:b8:3e:d0:c5:fb:78:b9:c3:72:00:fa:77

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate idfederation.merck.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idfederation.merck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idfederation.merck.com
www.idfederation.merck.com

Other certificates including the domain name merck.com

(limited to 100 certificates)
*.apps.americas-app2.cf.webappsp.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com

Certificate

The complete raw certificate details for idfederation.merck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BhGzr7JRVPidYu4z6wM
PrU9KWHC4gN2Po6FYchg2XRIrpIevIB4F4c6Jv+CNeSMWpZ5j7ISyGNCWWu+Zqsw
JfEgxYPIItn/ZrHmlZ+00jrz7cn0JJELe6/Qrt6kumoN4mdthfSnSNiNUEJPsXsN
1cWj50MwdG3WVI+80lUWyEqAli6fr1p8ylw4dkWSYd+CswKDQNfEqpj4DJQikhLZ
31wv+QgKOCQzal+Te9WmyauTPlyA/xeCXbPfuu0JDBpB4KPmkR5to6oRg7vogOZI
e98oCnS92II74ZpsVm2yCABHK/2bz78rHMD0zkrdvKW70zQKr0L7e299HVk5338d
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313150735785863676719934268264058180654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07033'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kenilworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2000 Galloping Hill Rd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Merck & Co., Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Data & System Protection'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosted by Merck Sharp & Dohme Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idfederation.merck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28794304766040446876092891567331706852373228241696985643302757669311651588051461678548389202869780967593529234030426695948919318879988085476958337207802938450277741538339115926965542836794478691390329949172430002291644197374664068708126882457020986313952848232507370738057877577856709186115909557907833108576809541891768911992730024226939556722605833513834518737189997919416109631212131786383996872788895491281756069912913006955630920400839702056899952076231710091277338164451920625842231123549193809719574360271813485604302567097920907092369318794653857717033250120323272581593086129493984314686576841338790839524751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c41a028f7b5a77f11084d8beaf77b3a182aee5e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idfederation.merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idfederation.merck.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00707ff77e64a7d2e5b5fd27b5123c56ae6936927e0fc614fd08ac85fe0204e03b8c85ac91ab9832cfeccd13e0b295ddf76b9880f533633696380e720ebca5b455fa8293cfe597c1bdad0ff6414888a085c78bf41a8013d94f95909cc2310ecdf24b0d4080686e398ccf4e894065db9be06cfa93e382cd760196759df64ba9e768703fe03925372ce513eee036120b0de6e6337104057287ba00d5275bdce2c9aab03c9776332b108a08d16922e17a8c4235fc832e097ca30c984373600ed4efe57840b5a4fab48e5d9d5feb0230295036a0318ed7c2806f2d4b9a642479c281a393b601c9ddc52ab0bc24487ca04a806ff8cd7ee9ef1f75347bce26e65a15c489