imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:ee:07:18:52:10:c2:4f:0d:64:15:2f:9d:5b:92:17 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ee:07:18:52:10:c2:4f:0d:64:15:2f:9d:5b:92:17
Serial Number (int): 2565138551857361968350642813313716759
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d6:c4:43:48:4a:40:0f:2d:77:c9:ed:5f:66:20:d1:5e:fd:a1:e6:e0
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 90:1e:0e:cb:f4:e4:ea:3c:1b:0a:12:ab:14:6f:98:0e:dc:6e:aa:6b
Fingerprint (sha256): 00:7c:a2:df:31:b4:93:cd:fd:f8:88:8f:8d:32:4d:6f:08:67:b7:3e:72:44:90:59:cd:e9:d7:1b:52:0d:b7:68

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.activatethecard.com
qa.mhiapps.com
rsc.mms.mckesson.com
uat01.mms-st.mckesson.com
aimovigfreetrialoffer.com
api.mms.mckesson.com
scri.com
activatethecard.com
paragardbvsp.com
mckessonspecialtyhealth.com
mba.mckesson.com
*.bardreach.com
sterlingmedical.com
www.mhiapps.com
support.gilenya.com
cvo.mckesson.net
*.supplier.mckesson.com
*.qualif.ecacum-ocp.fr
usoncology.com
secureqa.mooremedical.com
dev.orbits.mckesson.com
test.mhiapps.com
*.mhiapps.com
enhancedpatientsupport.com
mms-st.mckesson.com
*.mckessonqa.com
prodordasset.connect.mckesson.com
secure.mms.mckesson.com
*.mycareplusonline.com
*.scri.com
www.psstxt.info
*.pharmacyservices.mckesson.com
dev.simplymedical.com
mckessonperformancebenchmarks.com
*.celesiocorp.net
*.clarusonesourcing.com
*.mygsonline.com
bardreach.com
demo.mhiapps.com
qa.mba.mckesson.com
*.mooremedical.com
*.oneaccess.mckesson.com
*.sterlingmedical.com
*.practicefocus.mckesson.com
dev.mhiapps.com
in.simplymedical.com
*.paragardbvsp.com
secure.mooremedical.com
simplymedical.com
*.mba.mckesson.com
*.mckessonperformancebenchmarks.com
mypss.com
pricingdev.mms-st.mckesson.com
riskmanager.mckesson.net
*.northstarhealthcare.ie
*.dev.supplier.mckesson.com
*.cork.mckesson.com
mc.connect.mckesson.com
*.mckesson.com
qa01.mms-st.mckesson.com
www.myspportal.com
*.dev.reports.mckesson.com
reports.mhiapps.com
*.oneaccess.sterlingmedical.com
psstxt.info
www.enhancedpatientsupport.com
*.mypss.com
dev.mckdirect.mckesson.com
pay-dev.mms.mckesson.com
images.mooremedical.com
*.simplymedical.com
imperva.com
*.mckessonspecialtyhealth.com
portal.api.mms.mckesson.com
mygsonline.com
copayhelp.mckesson.com
dev.mms.mckesson.com
*.rxservices.mckesson.com
www.aimovigfreetrialoffer.com
mhiapps.com
*.iknowmed.com
cr.mckesson.net
pay.mms.mckesson.com
*.reports.mckesson.com
*.solari.cloud
dev-secure.mms.mckesson.com
ipsencaresportal.biologicsinc.com
dev01.mms-st.mckesson.com
mooremedical.com
mycareplusonline.com
*.usoncology.com
*.dev.oneaccess.mckesson.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIObDCCDVSgAwIBAgIQAe4HGFIQwk8NZBUvnVuSFzANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRNDAeFw0yMzEx
MTMwODExMTJaFw0yNDA1MTEwODExMTJaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksWWBrGdPMjkxrWl4TU2
42hdKTdS2+YW0XBkjm0iLsyyeHOEfOCsAZd8Rm/lwauEg//iqA3kNLowlGQra3EZ
D/t/pe2O6SyndicFLib6yQ95b9O+tSl/dU5rRvsLXghhlYFc8GYeik3t6i/Z7wTD
r5Arof3n8nKtBy7kToIMuHDsD1K4IvhPgJdTj5kXdJxL76M5Cp+G9OFHaU3zKaaP
O0UGo76GW5mTFsGslgRdwcgq16ph5NP+RGbiGU/cuOWCuQrd9ZzjU16B7DCJ3Uwb
mYReH9N+WE0fibLgy5dNqtdahkS1dAZDQZ/+LyYILnH9GIDKOKyNJiotM3CC+OmH
mwIDAQABo4ILcjCCC24wgggoBgNVHREEgggfMIIIG4IVKi5hY3RpdmF0ZXRoZWNh
cmQuY29tgg5xYS5taGlhcHBzLmNvbYIUcnNjLm1tcy5tY2tlc3Nvbi5jb22CGXVh
dDAxLm1tcy1zdC5tY2tlc3Nvbi5jb22CGWFpbW92aWdmcmVldHJpYWxvZmZlci5j
b22CFGFwaS5tbXMubWNrZXNzb24uY29tgghzY3JpLmNvbYITYWN0aXZhdGV0aGVj
YXJkLmNvbYIQcGFyYWdhcmRidnNwLmNvbYIbbWNrZXNzb25zcGVjaWFsdHloZWFs
dGguY29tghBtYmEubWNrZXNzb24uY29tgg8qLmJhcmRyZWFjaC5jb22CE3N0ZXJs
aW5nbWVkaWNhbC5jb22CD3d3dy5taGlhcHBzLmNvbYITc3VwcG9ydC5naWxlbnlh
LmNvbYIQY3ZvLm1ja2Vzc29uLm5ldIIXKi5zdXBwbGllci5tY2tlc3Nvbi5jb22C
FioucXVhbGlmLmVjYWN1bS1vY3AuZnKCDnVzb25jb2xvZ3kuY29tghlzZWN1cmVx
YS5tb29yZW1lZGljYWwuY29tghdkZXYub3JiaXRzLm1ja2Vzc29uLmNvbYIQdGVz
dC5taGlhcHBzLmNvbYINKi5taGlhcHBzLmNvbYIaZW5oYW5jZWRwYXRpZW50c3Vw
cG9ydC5jb22CE21tcy1zdC5tY2tlc3Nvbi5jb22CECoubWNrZXNzb25xYS5jb22C
IXByb2RvcmRhc3NldC5jb25uZWN0Lm1ja2Vzc29uLmNvbYIXc2VjdXJlLm1tcy5t
Y2tlc3Nvbi5jb22CFioubXljYXJlcGx1c29ubGluZS5jb22CCiouc2NyaS5jb22C
D3d3dy5wc3N0eHQuaW5mb4IfKi5waGFybWFjeXNlcnZpY2VzLm1ja2Vzc29uLmNv
bYIVZGV2LnNpbXBseW1lZGljYWwuY29tgiFtY2tlc3NvbnBlcmZvcm1hbmNlYmVu
Y2htYXJrcy5jb22CESouY2VsZXNpb2NvcnAubmV0ghcqLmNsYXJ1c29uZXNvdXJj
aW5nLmNvbYIQKi5teWdzb25saW5lLmNvbYINYmFyZHJlYWNoLmNvbYIQZGVtby5t
aGlhcHBzLmNvbYITcWEubWJhLm1ja2Vzc29uLmNvbYISKi5tb29yZW1lZGljYWwu
Y29tghgqLm9uZWFjY2Vzcy5tY2tlc3Nvbi5jb22CFSouc3RlcmxpbmdtZWRpY2Fs
LmNvbYIcKi5wcmFjdGljZWZvY3VzLm1ja2Vzc29uLmNvbYIPZGV2Lm1oaWFwcHMu
Y29tghRpbi5zaW1wbHltZWRpY2FsLmNvbYISKi5wYXJhZ2FyZGJ2c3AuY29tghdz
ZWN1cmUubW9vcmVtZWRpY2FsLmNvbYIRc2ltcGx5bWVkaWNhbC5jb22CEioubWJh
Lm1ja2Vzc29uLmNvbYIjKi5tY2tlc3NvbnBlcmZvcm1hbmNlYmVuY2htYXJrcy5j
b22CCW15cHNzLmNvbYIecHJpY2luZ2Rldi5tbXMtc3QubWNrZXNzb24uY29tghhy
aXNrbWFuYWdlci5tY2tlc3Nvbi5uZXSCGCoubm9ydGhzdGFyaGVhbHRoY2FyZS5p
ZYIbKi5kZXYuc3VwcGxpZXIubWNrZXNzb24uY29tghMqLmNvcmsubWNrZXNzb24u
Y29tghdtYy5jb25uZWN0Lm1ja2Vzc29uLmNvbYIOKi5tY2tlc3Nvbi5jb22CGHFh
MDEubW1zLXN0Lm1ja2Vzc29uLmNvbYISd3d3Lm15c3Bwb3J0YWwuY29tghoqLmRl
di5yZXBvcnRzLm1ja2Vzc29uLmNvbYITcmVwb3J0cy5taGlhcHBzLmNvbYIfKi5v
bmVhY2Nlc3Muc3RlcmxpbmdtZWRpY2FsLmNvbYILcHNzdHh0LmluZm+CHnd3dy5l
bmhhbmNlZHBhdGllbnRzdXBwb3J0LmNvbYILKi5teXBzcy5jb22CGmRldi5tY2tk
aXJlY3QubWNrZXNzb24uY29tghhwYXktZGV2Lm1tcy5tY2tlc3Nvbi5jb22CF2lt
YWdlcy5tb29yZW1lZGljYWwuY29tghMqLnNpbXBseW1lZGljYWwuY29tggtpbXBl
cnZhLmNvbYIdKi5tY2tlc3NvbnNwZWNpYWx0eWhlYWx0aC5jb22CG3BvcnRhbC5h
cGkubW1zLm1ja2Vzc29uLmNvbYIObXlnc29ubGluZS5jb22CFmNvcGF5aGVscC5t
Y2tlc3Nvbi5jb22CFGRldi5tbXMubWNrZXNzb24uY29tghkqLnJ4c2VydmljZXMu
bWNrZXNzb24uY29tgh13d3cuYWltb3ZpZ2ZyZWV0cmlhbG9mZmVyLmNvbYILbWhp
YXBwcy5jb22CDiouaWtub3dtZWQuY29tgg9jci5tY2tlc3Nvbi5uZXSCFHBheS5t
bXMubWNrZXNzb24uY29tghYqLnJlcG9ydHMubWNrZXNzb24uY29tgg4qLnNvbGFy
aS5jbG91ZIIbZGV2LXNlY3VyZS5tbXMubWNrZXNzb24uY29tgiFpcHNlbmNhcmVz
cG9ydGFsLmJpb2xvZ2ljc2luYy5jb22CGWRldjAxLm1tcy1zdC5tY2tlc3Nvbi5j
b22CEG1vb3JlbWVkaWNhbC5jb22CFG15Y2FyZXBsdXNvbmxpbmUuY29tghAqLnVz
b25jb2xvZ3kuY29tghwqLmRldi5vbmVhY2Nlc3MubWNrZXNzb24uY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFNbEQ0hKQA8td8ntX2Yg0V79oebgMFcGA1UdIARQME4wCAYGZ4EMAQIBMEIG
CisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2ln
bi5jb20vcmVwb3NpdG9yeS8wDAYDVR0TAQH/BAIwADCBngYIKwYBBQUHAQEEgZEw
gY4wQAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2NhL2dz
YXRsYXNyM2R2dGxzY2EyMDIzcTQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUu
Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2EyMDIzcTQuY3J0
MB8GA1UdIwQYMBaAFKoRcY+VxFiYi7FuDztQaCS8uBm8MEgGA1UdHwRBMD8wPaA7
oDmGN2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNj
YTIwMjNxNC5jcmwwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AHb/iD8KtvuV
UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi8e8GbMAAAQDAEYwRAIgSKI6ycU2
wzHvKzxNtnXWIBQLOOadAGsibEViYeJsr9gCIFnulyK+/4NorVBr2lCvgfEgdGwn
uJO222uZXuyJG5VSAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA
AAGLx7wahQAABAMARzBFAiEA6s1sYpmNsh3Hi0oFS9gp1x9nXUWU+VU6LA6WkHk/
IF4CIFzcPj1afybJWOaRPBdjfIDptFSXcj9pVHfElYGDi28MAHYASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLx7wcPgAABAMARzBFAiAQ8kd1ssCW
fNS6jWPRd+jw3Y0SkufNv0V6A4LQpa4IZAIhAPLPJt0f4PsS3QRZ/so5AYlQIcuS
5dqI72BB05Se9V37MA0GCSqGSIb3DQEBCwUAA4IBAQB7aocrV2IVsGLmcN+ykyRu
+Pm6/vFFtpFhJSCf9EObuqfrISakyRIUVqoM3QBN4Znv9UbqxToF0QvS1JA6tJlz
Qt0stcEC7CqXMkzXC3VQCpfMTuYzLi/0pnmU8kC8MzGnjCx8+eWyEC8ZvAqH9ZC0
kvxuSLv51fRzxHk6l60zrSwg3/l3DZkZw4sJyNnKKgJAvbVmlbyliYLV+0rKQruF
/rox4+OPqIH8Ay2WKFBtdP8qBnsIQRNinOOTxId5zWQRndg4kget1sgaGxw64MVI
SGJqI7RNiTtmLwjtlRlZ3+9cL4jcQ4ih+H3bt1oAxhHkN6CTm7wg7iIWDZIfnm8O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksWWBrGdPMjkxrWl4TU2
42hdKTdS2+YW0XBkjm0iLsyyeHOEfOCsAZd8Rm/lwauEg//iqA3kNLowlGQra3EZ
D/t/pe2O6SyndicFLib6yQ95b9O+tSl/dU5rRvsLXghhlYFc8GYeik3t6i/Z7wTD
r5Arof3n8nKtBy7kToIMuHDsD1K4IvhPgJdTj5kXdJxL76M5Cp+G9OFHaU3zKaaP
O0UGo76GW5mTFsGslgRdwcgq16ph5NP+RGbiGU/cuOWCuQrd9ZzjU16B7DCJ3Uwb
mYReH9N+WE0fibLgy5dNqtdahkS1dAZDQZ/+LyYILnH9GIDKOKyNJiotM3CC+OmH
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2565138551857361968350642813313716759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 08:11:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 08:11:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18528225832579832512466419053518380788355818962083641532749723116062998483953092808183855413922805144876019493799699545288250725622185700983726114395993174359895837721133239285657816853024409609870054802815334814127276990236857625857691900488758668234652465681980187715258972149776731128650240979209046576495819111404337054067661506125393810857294639175541028370698141096203297463830169251028235870679038727822225624317196583050542579135306059333799684650474030767393209564070683959420844899505452341629568055791461078292630819842903387565224380672181361209823160302432952426791273386457335757749767630376555564861339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activatethecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsc.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat01.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimovigfreetrialoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activatethecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragardbvsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckessonspecialtyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bardreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvo.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualif.ecacum-ocp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.orbits.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancedpatientsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodordasset.connect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycareplusonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psstxt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmacyservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckessonperformancebenchmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celesiocorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarusonesourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneaccess.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practicefocus.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paragardbvsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonperformancebenchmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricingdev.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskmanager.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northstarhealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cork.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.connect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa01.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myspportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.reports.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneaccess.sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psstxt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enhancedpatientsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mckdirect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonspecialtyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.api.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copayhelp.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimovigfreetrialoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iknowmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reports.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solari.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-secure.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsencaresportal.biologicsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareplusonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.oneaccess.mckesson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6c443484a400f2d77c9ed5f6620d15efda1e6e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc7bc19b30000040300463044022048a23ac9c536c331ef2b3c4db675d620140b38e69d006b226c456261e26cafd8022059ee9722beff8368ad506bda50af81f120746c27b893b6db6b995eec891b95520076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc7bc1a850000040300473045022100eacd6c62998db21dc78b4a054bd829d71f675d4594f9553a2c0e9690793f205e02205cdc3e3d5a7f26c958e6913c17637c80e9b45497723f695477c49581838b6f0c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc7bc1c3e0000040300473045022010f24775b2c0967cd4ba8d63d177e8f0dd8d1292e7cdbf457a0382d0a5ae0864022100f2cf26dd1fe0fb12dd0459feca3901895021cb92e5da88ef6041d3949ef55dfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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