*.eu2.digitalpfizer.com

- Pfizer Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d4:9a:ff was issued on by Entrust, Inc..

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Pfizer Incorporated

Organization: Pfizer Incorporated
State / Province: Connecticut
Locality: Groton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d4:9a:ff
Serial Number (int): 1356110591
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: a4:e1:53:11:a2:3d:7e:58:33:c9:77:55:2e:d3:d0:83:30:7f:d3:db
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 34:b4:1c:f8:67:62:bf:e2:0c:ab:3a:ed:1c:09:52:12:70:39:f5:e9
Fingerprint (sha256): 00:de:78:8a:31:45:33:9b:3f:33:b5:be:a6:e9:58:a7:3a:2c:ba:d8:c7:6a:4c:46:43:d7:0f:ca:40:3d:b6:14

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.eu2.digitalpfizer.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eu2.digitalpfizer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eu2.digitalpfizer.com
www.emergenc.ie
*.intergration.digitalpfizer.com
eu2.digitalpfizer.com
www.gammeadvil.fr
www.togetherprogramme.de
www.pfizerfarmamais.pt
www.togetherprogramme.ie
www.pfizerline.nl
www.togetherprogramme.es
www.thermacare.pt
www.togetherprogramme.be
*.prod.digitalpfizer.com
www.pfizerunsubscribe.com
*.dev.digitalpfizer.com
*.stage.digitalpfizer.com
www.togetherprogramme.com
www.pfizerpro.sa
www.thermacare.es
www.thermacare.com.ru
www.nexiumcontrol.pt
www.sendebirakabilirsin.com
www.prevnar13adulto.com
www.tickalert.org
www.warmtehelpt.be
www.lachaleursoulage.be
www.profesionisti.pfizer.ro
hcp.nexiumcontrol.pt
profesionisti.pfizer.ro
www.thermacare.sk
www.sencokyasa.com
www.centrumvitaminy.cz
selfservehosteu.pfizer.com
www.caltrate.cz
www.pnomomedya.com
www.togetherprogramme.no
www.alktesting.org
www.centrumvitamine.be
www.pfizerline.gr
www.pfizerpro.co.uk
www.centrumvitamine.nl
www.pfizer.ro
www.thermacare.be

Other certificates including the domain name digitalpfizer.com

(limited to 100 certificates)
sni.cloudflaressl.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com

Certificate

The complete raw certificate details for *.eu2.digitalpfizer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LOIUHnJ0LdQ9dupiinp
HYb3/DwP4MDKBaCM7jELP2JeG2FtS1A4VmHlpud/G9FB9enI9X7pzQX6VAmZXT1K
TxaxXwzdQN0bCKSyLJbYsUG3il466d926ie7PNm31TchiqqekCHyVd6KmtOnUt80
blsZw+po0uKuThhREhxaxB6c1biqbEqT0WeSozl9ZREQQKzIJEOv3TdgsUjiuVml
BNL/2hOxXqy4RvPecpj1N/QuLH3nVl7ggtgehHXShijdPOeP9iTh9ObQxbQcww++
KfagQxCifQXHN6HORbfnYBizVNQmc6YRSRjGDX0s4QiHhGQrKfewVze7Ca7aOTVt
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356110591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-01 15:54:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-13 19:36:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pfizer Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.eu2.digitalpfizer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30890677176188280285484816477159559174530307031399314171025887045978946483992275526233214917032013151129188097318188812159769803715946475190378855610773079692082131580719094215012333886241969534042162864443494083375260249128659212798099107594989847144404443470675173237266360920858178205757637600738440650802752720533305300651400576231144418562400739480861976057042493647662565611477116766152707046649097423916472287227599662624428642233243646275091071683063526229755987949259222592982204156011799996194051198708562139018028304469083203471705585569781140002344082374648904524600285168017929684588453677875965438815691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (992 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu2.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergenc.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intergration.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu2.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gammeadvil.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerfarmamais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermacare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerunsubscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerpro.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermacare.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermacare.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexiumcontrol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendebirakabilirsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prevnar13adulto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickalert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warmtehelpt.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lachaleursoulage.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profesionisti.pfizer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcp.nexiumcontrol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionisti.pfizer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermacare.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sencokyasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumvitaminy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservehosteu.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caltrate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnomomedya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherprogramme.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alktesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumvitamine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerline.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizerpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumvitamine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermacare.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4e15311a23d7e5833c977552ed3d083307fd3db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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