aws-ghh-amer-ssl-1-useast.merck.com

- Merck Sharp & Dohme LLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ba:bd:2e:30:e3:d4:17:4d:f3:cd:03:a9:37:a3:e2:ad was issued on by Sectigo Limited.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Merck Sharp & Dohme LLC

Organization: Merck Sharp & Dohme LLC
State / Province: New Jersey
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ba:bd:2e:30:e3:d4:17:4d:f3:cd:03:a9:37:a3:e2:ad
Serial Number (int): 248218688186560502999027816491833877165
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:e5:ed:15:b6:28:98:f0:c1:12:08:66:4f:36:7a:80:28:15:28:96
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): fd:5d:f9:88:36:55:79:4e:23:ab:c2:93:a0:70:ca:08:36:8d:2e:1e
Fingerprint (sha256): 03:7d:ec:b1:6d:d6:6d:e0:77:87:f5:0d:27:da:ee:0a:8a:8d:62:0e:5d:71:ea:e4:4c:c4:65:e1:3e:61:79:ec

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate aws-ghh-amer-ssl-1-useast.merck.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-ghh-amer-ssl-1-useast.merck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-ghh-amer-ssl-1-useast.merck.com
contentfactory.merck.com
cookbook.epublishmerck.com
fulfordindia.com
hit-supportinghealthstrategies.com
merckimages.com
merckoncology.com
merckonctriallink.com
pqa-staging.msd.com
pqa.msd.com
promoplan-staging.msd.com
promoplan.msd.com
prtscheduler.msd.com
scheduler-staging.msd.com
scheduler.msd.com
searchservice.epublishmerck.com
smartfind-staging.msd.com
smartfind.msd.com
synops-staging.msd.com
synops.msd.com
workfront-staging.msd.com
workfront.msd.com
workfrontautomation.com
workfrontsupport-staging.msd.com
workfrontsupport.msd.com
www.enhancingvaccinationawareness.com
www.fulfordindia.com
www.healthinpracticeprogram.com
www.merckdistributorcentral.com
www.merckimages.com
www.merckoncology.com
www.merckonctriallink.com
www.mymerckaccounts.com
www.workfront.msd.com
www.workfrontautomation.com

Other certificates including the domain name merck.com

(limited to 100 certificates)
*.apps.americas-app2.cf.webappsp.com
tibcobpm-it.merck.com
usml2f-sfn.merck.com
argusmarttestoci.merck.ls-cloud.com
uat.cmdbupdate.merck.com
epub-nv-redirects-cert-1.merck.com
apptechwpt2.merck.com
asia-cert3.cf.merck.com
merckvaccines-uat.merck.com
egate-emea.merck.com
tst-webmail.merck.com
egate-emea.merck.com
idfederation.merck.com
straindb.gin.merck.com
idpcd-uat.merck.com
qlctccp0110.merck.com
password.merck.com
oudadmincloud.merck.com
cis-isales.merck.com
eddy.merck.com
sgskct-expwyc-cls.merck.com
mmjardevtest.merck.com
ieird-sft.merck.com
lctcvd6771.merck.com
mpm.merck.com
ktchpcpi001.merck.com
cdas-ut.merck.com
sync.merck.com
phone-tst.merck.com
oimprodoci.merck.ls-cloud.com
keymap-api.merck.com
isales-dev.merck.com
epub-nv-redirects-cert-1.merck.com
gulf-isales.merck.com
comment-test.merck.com
usctapp40961.merck.com
sgpayroll.merck.com
dev5-mma-admin.merck.com
epub-nv-redirects-cert-1.merck.com
wpm-it-ovd.merck.com
omdlx.merck.com
cloudmail.merck.com
usctapt11168.merck.com
*.apps.asia.cf.webappsp.com
myphone-pilot.merck.com
iebrif-sfn.merck.com
test-september.merck.com
mmjarsit.merck.com
tiea-ut.merck.com
hpcws-ctc-b.merck.com
soaadmincloud.merck.com
*.apps.asia.cf.webappsp.com
incapsula.com
essalf-sfn.merck.com
hemwb-tst.merck.com
brcmpf-sfn.merck.com
tableau.merck.com
euwedmp700001.merck.com
deburf-sfn.merck.com
dvdol.merck.com
g2n.merck.com
lctcvp1042.merck.com
uswptf-mrl.merck.com
beantt-expwye-cls.merck.com
iexpense-ut.merck.com
wwwredirect.merck.com
o365mail-dev-vip.merck.com
test-september.merck.com
www.msd.lt
sftprod.merck.com
usctapt640774.merck.com
*.apps.americas.cf.webappsp.com
trend-ut.merck.com
epub-nv-redirects-cert-1.merck.com
sip.ucfederation.com
epub-nv-redirects-cert-1.merck.com
tsps-dev.merck.com
epub-nv-redirects-cert-1.merck.com
pvanalytics.merck.com
cirrusjar.merck.com
canmobileapp.merck.com
testname.merck.com
*.apps.europe.cf.webappsp.com
www.merck.com
testwildcard.oct.merck.com
egate-ap.merck.com
dev.jupyterhub.gin.merck.com
hivaccess-ut.merck.com
usuedzp750003-1.merck.com
usctapt006899.merck.com
aws-ghh-amer-ssl-1-useast.merck.com
test222sans.merck.com
www.msd.lt
desktop-test.merck.com
tacsctcp2.merck.com
uswhsc2-guest-drac.merck.com
cdas-utcf.merck.com
epub-nv-app-cert-3.merck.com
*.apps.americas.cf.webappsp.com
lctcvp1058.merck.com

Certificate

The complete raw certificate details for aws-ghh-amer-ssl-1-useast.merck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWJWxl7SGYS/WopqSX4J
BojBBZdO6s/+uJrMHsjQDw92v8tWUBHeqPe22M19XYDOS31nWf9qBSoIs9ADukTM
GYN7UNKiWHwcE/NxMJbnTe6vj3BzReV1JvtCFcJ0coHlQqKf1eQ7v4xG81DcyOeF
Gtx5Zkd/NZbD0MGS9aA9LICS8c7e4OQTS/1cF4mRU4Jz1VmnBZhAMOpDSYDF3Jtd
k0OnbZN6lZUaI1XHGUqU994KYv6irGWm2ksMzCCeuR/vbMzs7VuM+5Vz8ONboAp9
lc5xOr/J5d0vGutLdRP1P1xOBuwS0j+bdnUfmxrvdBPQdmEv+wt/63Jql7J1CfNX
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 248218688186560502999027816491833877165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Merck Sharp & Dohme LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-ghh-amer-ssl-1-useast.merck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23402579169412103869838081026696308400641779598436841255325312156124550337451814992305399643067586869654340310314406540163971828196232567436752363808912394359460562134007352265356725703750077952847517701932905485015864574432613668473728721710561558067286338336135064030717012042719987069168513531892519818884092325877826052817557720793808610509845430330119771358957513264477076396988902617489774119140445715051779768294963646030863505664234294168171426969147817115920566512449834432015913915050249629068343840277567682917652764180233244730194326220263399930504432886790300187406264835789171553423883594920190234810297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bde5ed15b62898f0c11208664f367a8028152896
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (881 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-ghh-amer-ssl-1-useast.merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentfactory.merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookbook.epublishmerck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulfordindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hit-supportinghealthstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merckimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merckoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merckonctriallink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqa-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqa.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoplan-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoplan.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prtscheduler.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchservice.epublishmerck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfind-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfind.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synops-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synops.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfront-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfront.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfrontautomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfrontsupport-staging.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfrontsupport.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enhancingvaccinationawareness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulfordindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthinpracticeprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merckdistributorcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merckimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merckoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merckonctriallink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymerckaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workfront.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workfrontautomation.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066908a3ab244b61696c8e770c858ad717e70af6d4cc8ed94dc85e6dd9839c32ca349bde85b63f87d869bd79c34c8c3edd4fbc783e0ffc1c42efa068d0b757f1e81da5e17406053d9bb8fd1beed29641a6def7dfb45d51a027519b1c1c9a7e6e75fdb82db7f333fc36abb83864edea2f6fa0303007ffdab0f9cf9831d7a7a8f750ea14b91a3f83bd5584923fd8f431ab5cfcc62cc5028707daeae3cf323e853624cc70b9c65a48ee71730fc7da5209ec7be3bf1c42ece2108330ba5ddded490f7ab33a1c1f1ea0e532486bf8d219852bfd3a68856c1e70ccb28be3e06d867e1a3c88f9aeb67c600d08217c12dc3879e22b4287cfbefc7e19b24536c9d5302e066