testwildcard.oct.merck.com
- Merck Sharp & Dohme Corp. -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number b5:31:6b:eb:40:a6:93:24:3e:1d:70:5c:a5:30:ad:d0 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Merck Sharp & Dohme Corp.
Organization:
Merck Sharp & Dohme Corp.
Organization unit: Data & System Protection
Organization unit: Hosted by Merck Sharp & Dohme Corp.
Organization unit: Enterprise SSL Pro
Organization unit: Data & System Protection
Organization unit: Hosted by Merck Sharp & Dohme Corp.
Organization unit: Enterprise SSL Pro
Address:
One Merck Drive
Postal code: 08889
State / Province: New Jersey
Locality: Whitehouse Station
Country: US
Postal code: 08889
State / Province: New Jersey
Locality: Whitehouse Station
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): b5:31:6b:eb:40:a6:93:24:3e:1d:70:5c:a5:30:ad:d0Serial Number (int): 240846878639592178301295507550254443984
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: b2:5c:f7:6a:98:95:1b:b5:e8:58:cb:d4:fe:76:26:ab:70:af:b6:90
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 4c:f9:4f:d9:ea:3e:a7:04:30:31:da:66:e6:31:e1:03:d8:e8:39:ca
Fingerprint (sha256): 03:17:80:2a:82:85:4b:51:23:07:be:e3:65:e0:d6:54:08:d9:ce:b1:89:15:73:3a:e6:c1:93:7b:2c:a9:20:d9
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate testwildcard.oct.merck.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testwildcard.oct.merck.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
testwildcard.oct.merck.com
www.testwildcard.oct.merck.com
www.testwildcard.oct.merck.com
Other certificates including the domain name merck.com
(limited to 100 certificates)
*.apps.americas-app2.cf.webappsp.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com
Certificate
The complete raw certificate details for testwildcard.oct.merck.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIRALUxa+tAppMkPh1wXKUwrdAwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0xOTA1MTMwMDAwMDBaFw0yMDA1MTIyMzU5NTlaMIIBIDELMAkG A1UEBhMCVVMxDjAMBgNVBBETBTA4ODg5MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRsw GQYDVQQHExJXaGl0ZWhvdXNlIFN0YXRpb24xGDAWBgNVBAkTD09uZSBNZXJjayBE cml2ZTEiMCAGA1UECgwZTWVyY2sgU2hhcnAgJiBEb2htZSBDb3JwLjEhMB8GA1UE CwwYRGF0YSAmIFN5c3RlbSBQcm90ZWN0aW9uMSwwKgYDVQQLDCNIb3N0ZWQgYnkg TWVyY2sgU2hhcnAgJiBEb2htZSBDb3JwLjEbMBkGA1UECxMSRW50ZXJwcmlzZSBT U0wgUHJvMSMwIQYDVQQDExp0ZXN0d2lsZGNhcmQub2N0Lm1lcmNrLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHHRXPOE0znAZKa6PF6sN/7h21q 7hBeayFkAPhXrQnxHC2UctO8CcLbzr7dd89IutmQB+OF7EAFtlUdgYQgLANeWEKx gUNryoR+IkyztswEaSTn96eSsyKBZv+dXYa7OG8OrMcdPcg7lGr27F1VaSLEUMjq aFfLWTDGZPsrabVG93NUZusKvscwiTCbYd9pHG/Ct+hNWk/xZq7B7bQZbLCwaONz BwFbQpWBiUsVSLeLtYSS9evyQfHvB7jDvOBmAAEExxec97E15vPp+MESlKvK4cTT iOg3XODpRCLLR92TA9AfbZycSFIJkLNh35Az9oHPeW4kWMk4pAgJSnp29XkCAwEA AaOCAhIwggIOMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1Ud DgQWBBSyXPdqmJUbtehYy9T+diarcK+2kDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMw QTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdv LmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwu c2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1 cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0 cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRh dGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au c2VjdGlnby5jb20wRQYDVR0RBD4wPIIadGVzdHdpbGRjYXJkLm9jdC5tZXJjay5j b22CHnd3dy50ZXN0d2lsZGNhcmQub2N0Lm1lcmNrLmNvbTATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG196ii4fa/s1g8hvR9O5NlgdRjt xSzdXkkafTThnKffljOGwhvqDg9yzxApga9MItBHoO46pDUY0f8vljLe/XYYifEt jOhpcLQ0fq3cFFK4gECMIezr4hGCgUnv/u78AJROyBwh+B5tpYk2RkFrlaqJ6azB 1mhidxCy0yR7iMipq3+rimEBSnKwtFpk4xLZMljHKaxmEjtVRN25W/K8lp5yzT0w F6xpo7MnXdlAQYLgNaFMASQVqzvpVCa7qBY3y9+2ng/qFG2biCvYKoy3niw3PXKC tEqZ7R1NU42ShRGGaVjlVKxq3gxC5v8PGOPz+fOSLjGCxJI3n60B493T/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcdFc84TTOcBkpro8Xqw 3/uHbWruEF5rIWQA+FetCfEcLZRy07wJwtvOvt13z0i62ZAH44XsQAW2VR2BhCAs A15YQrGBQ2vKhH4iTLO2zARpJOf3p5KzIoFm/51dhrs4bw6sxx09yDuUavbsXVVp IsRQyOpoV8tZMMZk+ytptUb3c1Rm6wq+xzCJMJth32kcb8K36E1aT/FmrsHttBls sLBo43MHAVtClYGJSxVIt4u1hJL16/JB8e8HuMO84GYAAQTHF5z3sTXm8+n4wRKU q8rhxNOI6Ddc4OlEIstH3ZMD0B9tnJxIUgmQs2HfkDP2gc95biRYyTikCAlKenb1 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 240846878639592178301295507550254443984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08889' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitehouse Station' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Merck Drive' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Merck Sharp & Dohme Corp.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Data & System Protection' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosted by Merck Sharp & Dohme Corp.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Pro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testwildcard.oct.merck.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24462257198000072865682257668571209616559556965957995123666239489224057999174445015739395324716380437011237866681700864957951796521346655907756212766399691681515106566924130791988372710447211143808943185598093966272822689829905245054176061410839357732868468719597407412160921512846358047919964879441517454943874454584804004860467027934865016855034431341931026658464756074283133840236268883931662841469084842836917938043542639775563242058255871632819746440171170847375454472010164689913370057524849385665044813188467079043672485481794180546006082326436539005788690204387024255942429016199679522374568259017445083641209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b25cf76a98951bb5e858cbd4fe7626ab70afb690 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testwildcard.oct.merck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testwildcard.oct.merck.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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