hivaccess-ut.merck.com

- Merck & Co., Inc. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 79:7e:46:54:a1:da:58:9e:6c:16:5e:26:ff:10:73:89 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Merck & Co., Inc.

Organization: Merck & Co., Inc.
Organization unit: Data & System Protection
Organization unit: Hosted by Merck Sharp & Dohme Corp.
Organization unit: Unified Communications
Address: 2000 Galloping Hill Rd.
Postal code: 07033
State / Province: New Jersey
Locality: Kenilworth
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 79:7e:46:54:a1:da:58:9e:6c:16:5e:26:ff:10:73:89
Serial Number (int): 161492243368079166618226648523513820041
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:ba:30:d3:62:cf:d0:78:c4:cd:d3:36:bc:d2:be:2a:ba:9d:4c:90
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): cc:93:6f:b7:48:85:e0:f2:93:f7:9b:98:06:bc:34:7b:15:f8:1d:4f
Fingerprint (sha256): 03:36:a5:0e:aa:ba:06:8d:0c:b5:ff:76:a6:37:3e:9f:8e:a9:02:cd:a0:34:9b:bb:90:26:cb:31:b3:40:b5:4d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate hivaccess-ut.merck.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hivaccess-ut.merck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hivaccess-ut.merck.com
hivaccess-it.merck.com

Other certificates including the domain name merck.com

(limited to 100 certificates)
*.apps.americas-app2.cf.webappsp.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com

Certificate

The complete raw certificate details for hivaccess-ut.merck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv1ep0U6SlTP2g5MzspH
5grG33Igg4OATrrdZosowUM31l1irFJ9SrIvGDV/TgySu8G6xVgjxeBcPhYqKbVG
bnnxh58nA8bMLibtYx37uO1slrWSJZib4phRuwbCulSoNeyWjNc6+pKg40Vv6ivM
vGejUVPkWEdTd6OAGtuGZOeeoEK+L8sjMHnTx2fXxs2kDku1fGIBDXHDnU6gvr59
mJj5rNZpQy0sAaB4cW6901ZKnA7rQUk0Z0w0CoFWpb1TSGiAop+7fbmKgTHkEEOo
u78vR/FXdQf8QIPPPHHuzZbuCA/KZjcWiHxDfVOwjPSGJU1bQs3zyz4CUVfRJldS
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161492243368079166618226648523513820041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07033'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kenilworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2000 Galloping Hill Rd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Merck & Co., Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Data & System Protection'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosted by Merck Sharp & Dohme Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hivaccess-ut.merck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24615172438757584053170042008543490661288647784712440270236202654760593597226356361347308904358598749733319372472960754732260408370113833151450258413532559230683353982690489042302546440142894372588323227788203241859533999951463124698853041172938065017351606996766375680481836324612815328984819772838675834085774384478937094420136952990534206465100542953216497914004372041263408871307651389876190611924594009233232715541601505319296927899626277154144303512169542685828770274262261042200450566035677340947718025169545299955618029492584159605153216439090171959968723900883235060012782226266114701240423103992407512273413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecba30d362cfd078c4cdd336bcd2be2aba9d4c90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivaccess-ut.merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivaccess-it.merck.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001663fb91c270000040300473045022100aa392890dc7ec80758a6796c094306db2e287d089179f3e7197840f2ca96b6cc02204bf0e28316b7b891693633d90d0d06524c40efcab564c867241cdb2a20f330e9007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001663fb91c61000004030046304402203b5697f92560dcff1cb2e215bdaf2a5df087659795cbe3ab789e0b0843bb7237022059a2e64d615a75e09f1dd37dbef168de53804b7a09ca65945865aa1c9cb407aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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