live.novartis.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d5:db:cf:bb:93:03:84:77:2a:41:28:ee:5e:8b:ef:41:d7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=live.novartis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:db:cf:bb:93:03:84:77:2a:41:28:ee:5e:8b:ef:41:d7
Serial Number (int): 334109181490425470311493479497435303592407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:24:69:dd:5c:03:78:0c:c8:89:4d:c2:e8:81:3b:6d:41:20:dc:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:04:76:19:59:1d:87:00:94:f1:b8:2b:97:79:ee:18:70:16:5e:fa
Fingerprint (sha256): 03:b8:d5:e7:a1:3a:75:1a:2f:b5:ae:21:e3:3e:0d:9c:64:bd:9c:80:cc:30:ee:a2:08:45:f6:86:8b:f3:30:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.novartis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.novartis.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.novartis.com
www.live.novartis.com

Other certificates including the domain name novartis.com

(limited to 100 certificates)
www.ngcs.novartis.com
www.genoptix.com
dailiestotal1.dailies.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
incapsula.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
sni.cloudflaressl.com
novartis.com
gwhost2.novartis.com
www.ngcs.novartis.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
sni.cloudflaressl.com
novartis.com
ocb.novartis.com
live.novartis.com
vanity6.jiveon.com
xolair.co.uk
ssl384476.cloudflaressl.com
ussv.cvpn.novartis.com
novartis.com
collab-edge.cdn.securityforward.net
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.genoptix.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vanity6.jiveon.com
sni.cloudflaressl.com
san-14-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
medhub.com.au
image.e.atmosphere.tv
image.email.novartis.es
prod.oncologypipeline.novartis.com
join.novartis.com
novartis.com
hcp.novartis.com
sni.cloudflaressl.com
san-1-s7.tlsprovisioning.exacttarget.com
incapsula.com
sni.cloudflaressl.com
image.20210419.200456.s7.et.yellsatcloud.com
incapsula.com
sni.cloudflaressl.com
speakeralliance2.novartis.com
external-trd-tst.novartis.com
novartis.com
retired.novartis.com
sni.cloudflaressl.com
ssl384476.cloudflaressl.com
ssl384477.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
search.novartis.com
vanity6.jiveon.com
sni.cloudflaressl.com
vanity6.jiveon.com
san-5-s7.tlsprovisioning.exacttarget.com
ssl384478.cloudflaressl.com
sni.cloudflaressl.com
www.pharma.us.novartis.com
novartiscorp.novartis.com
id.novartis.com
incapsula.com
www.iportal-qa.novartis.com
www.genoptix.com
sni.cloudflaressl.com
medhub.com.au
www.genoptix.com
prod.novartis.com
xolair.co.uk
sni.cloudflaressl.com
www.us.state.lookup.novartis.com
www.portal.novartis.com
www.my.novartis.com
www.pki.novartis.com
www.genoptix.com
sni.cloudflaressl.com
san-5-s7.tlsprovisioning.exacttarget.com
yammerstream.novartis.com
am1023dl50pl1.023d.dedicated.lync.com
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
image.email.novartis.es
svisitor.pharma.us.novartis.com
view.engage-us.novartis.com
usbrc.novartis.com
oak.novartis.com
www.us.state.lookup.novartis.com
www.ophthalmic.novartis.com
*.jiveon.com

Certificate

The complete raw certificate details for live.novartis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEUt+KuCR9jO+dNyf3/Q6AT0qcGzOg
kzLewDT5Hb7TA3aieh6evefQV9dh0W71hBfKq2EnKchh9GavDFgkSb4WIQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334109181490425470311493479497435303592407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 12:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 12:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.novartis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000452df8ab8247d8cef9d3727f7fd0e804f4a9c1b33a09332dec034f91dbed30376a27a1e9ebde7d057d761d16ef58417caab612729c861f466af0c582449be1621
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							362469dd5c03780cc8894dc2e8813b6d4120dc98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live.novartis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dd61f926a000004030047304502204b9ac21833163989a566da66ec5ffa7677366ea05df23895eaf7e37bdaec6f3c022100f9e0fa373de2cc73a87e9ef6b3e98a183668ae8b4f149e0a4cbcf42ce6d43fe2007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dd61f92770000040300473045022006eb10b8c674a51106e3c15fefc2605600fd221c31f1bff058bfb7cbbd333020022100f394421b7247322c5987935cf7b8d469c2416e41318c5529ac5a937498753703
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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