*.us3.digitalpfizer.com

- Pfizer Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d5:7a:6f was issued on by Entrust, Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Pfizer Incorporated

Organization: Pfizer Incorporated
State / Province: Connecticut
Locality: Groton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d5:7a:6f
Serial Number (int): 1356167791
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: cc:26:fb:19:df:56:26:7d:f7:e1:73:64:4a:e2:35:d1:ee:fe:97:47
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 10:34:26:20:2d:00:7b:bf:9c:28:2b:a9:a3:04:53:51:9e:b9:0d:ad
Fingerprint (sha256): 00:63:ab:8f:59:57:94:c3:ff:80:69:db:75:ce:fc:68:2b:ca:12:d0:11:88:46:53:81:9f:9d:71:dc:25:07:db

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.us3.digitalpfizer.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.us3.digitalpfizer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.us3.digitalpfizer.com
us3.digitalpfizer.com
www.get-quit.com
*.dev.digitalpfizer.com
spire.pfizer.com
*.intergration.digitalpfizer.com
*.prod.digitalpfizer.com
www.whopneu.com
www.prevnar13espanol.com
www.getquit.com
ra.xeljanz.com
*.stage.digitalpfizer.com
www.fragmin.ca
www.levoxyl.com
www.sickjustgotreal.com
centrumcam.com
www.storyhalftold.com
www.centrumcam.com
www.farmapfizer.com.ar
ra.psopact.com
psoriasis.xeljanz.com
farmapfizer.com.ar
www.viagraenespanol.com
www.aprendedeneumonia.com

Other certificates including the domain name digitalpfizer.com

(limited to 100 certificates)
sni.cloudflaressl.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com

Certificate

The complete raw certificate details for *.us3.digitalpfizer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yP+9wtW6iaPrC7iBrVR
EhsLKSQ6MFOnbtLoyuNK+SdD2HOszKephLKZuMqw7mWjPMM1Rq5JY6l+LNdY74ci
pF++KCrSqzLwr53+TJpqi9Khwep5noPZr0mOUOpjoYYiSCvDpJEr2SOgCV5G8JuI
YXER0LSeKiGLfdLLsmcH4t3SNLkG0EQypTd2DskMjoj9LV3MDIIydbujeuvAeMHD
klIQWX9LhtbeWl31VGq2ePsma5+yRiaapKnLMr63iM2vheDkWKBrf/c1IvwlWiF5
QIqBZq2lBt2cdL5TnLdmYW56gphV+vHU7cmBjVH42VxNEmfNojFhEFM3q/PP9f9X
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356167791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-25 14:52:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-04 19:06:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pfizer Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.us3.digitalpfizer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26654032615844342828459337752163764375690833914796672114826240714737363426819263400258506732166452696846406517897370301041413958679987317362701481964323656972434308274047705068875350224573416034961808697938096558975195313783931659276852015501582780297929983754471137239592608068133522594779010376557373490652708889740859007288656729612089001900642276951270007336622464591979640384638105770462222895719619876574122371611952317956316981050978727458031376996607497571737062908123863047463157337395414079815744170650942279113667532493642097721819214314544076206127183858183047319316998464806780283464274690669885259732839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us3.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us3.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.get-quit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spire.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intergration.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whopneu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prevnar13espanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getquit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.xeljanz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fragmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levoxyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sickjustgotreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumcam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storyhalftold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumcam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmapfizer.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.psopact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psoriasis.xeljanz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmapfizer.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viagraenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprendedeneumonia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc26fb19df56267df7e173644ae235d1eefe9747
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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