search.novartis.com

- Novartis Pharma AG -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:e8:6b:2e:9f:7f:69:a2:af:aa:56:64:f6:3e:d5:09 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novartis Pharma AG

Organization: Novartis Pharma AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:e8:6b:2e:9f:7f:69:a2:af:aa:56:64:f6:3e:d5:09
Serial Number (int): 7852926761789874749429191889119008009
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 32:2d:05:7b:f8:56:c4:fe:c5:a2:22:a9:04:d3:69:0c:43:3c:62:14
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 84:c7:dc:62:9e:fd:43:b8:45:d1:b5:8b:2a:61:b1:8c:6c:7f:70:ba
Fingerprint (sha256): 0c:03:7d:30:6d:66:1f:c2:d7:46:0a:9c:2a:65:17:ce:53:38:11:58:dd:b7:e0:22:82:98:60:ef:9d:a4:7a:18

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate search.novartis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search.novartis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

search.novartis.com
www.search.novartis.com

Other certificates including the domain name novartis.com

(limited to 100 certificates)
www.ngcs.novartis.com
www.genoptix.com
dailiestotal1.dailies.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
incapsula.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
sni.cloudflaressl.com
novartis.com
gwhost2.novartis.com
www.ngcs.novartis.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
sni.cloudflaressl.com
novartis.com
ocb.novartis.com
live.novartis.com
vanity6.jiveon.com
xolair.co.uk
ssl384476.cloudflaressl.com
ussv.cvpn.novartis.com
novartis.com
collab-edge.cdn.securityforward.net
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.genoptix.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vanity6.jiveon.com
sni.cloudflaressl.com
san-14-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
medhub.com.au
image.e.atmosphere.tv
image.email.novartis.es
prod.oncologypipeline.novartis.com
join.novartis.com
novartis.com
hcp.novartis.com
sni.cloudflaressl.com
san-1-s7.tlsprovisioning.exacttarget.com
incapsula.com
sni.cloudflaressl.com
image.20210419.200456.s7.et.yellsatcloud.com
incapsula.com
sni.cloudflaressl.com
speakeralliance2.novartis.com
external-trd-tst.novartis.com
novartis.com
retired.novartis.com
sni.cloudflaressl.com
ssl384476.cloudflaressl.com
ssl384477.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
search.novartis.com
vanity6.jiveon.com
sni.cloudflaressl.com
vanity6.jiveon.com
san-5-s7.tlsprovisioning.exacttarget.com
ssl384478.cloudflaressl.com
sni.cloudflaressl.com
www.pharma.us.novartis.com
novartiscorp.novartis.com
id.novartis.com
incapsula.com
www.iportal-qa.novartis.com
www.genoptix.com
sni.cloudflaressl.com
medhub.com.au
www.genoptix.com
prod.novartis.com
xolair.co.uk
sni.cloudflaressl.com
www.us.state.lookup.novartis.com
www.portal.novartis.com
www.my.novartis.com
www.pki.novartis.com
www.genoptix.com
sni.cloudflaressl.com
san-5-s7.tlsprovisioning.exacttarget.com
yammerstream.novartis.com
am1023dl50pl1.023d.dedicated.lync.com
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
image.email.novartis.es
svisitor.pharma.us.novartis.com
view.engage-us.novartis.com
usbrc.novartis.com
oak.novartis.com
www.us.state.lookup.novartis.com
www.ophthalmic.novartis.com
*.jiveon.com

Certificate

The complete raw certificate details for search.novartis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyDp0ig2BocBGcfIznGL
gc7pPWuPOMlwKypmg7xeyLXxSmf0MUj/S/5tiqSLIygDF7jXvkaz170StrSpMc0a
IPWNPGe1s7s2AIRHC/d6YGuoPQNkoBLPE9bQo/vsCcn6veq1ztZGb9XJWqDs/o/d
ZPbZvVywMantRBnTnAuZmEtzlyvoEbZ1qUFo3j9Xdu6szYY6Iu+qaLWZhfWphHpQ
li3hlyylZA8dYo4gpyl8BEyaczm0oqpgTxxzMGYdFyLcNOX1t3hBxXKORmMOos9L
PyIu7jQl7mfTEzy/u2ObFDU62xFwTl1NsZxMSXf55fe7JN+7aMrA+ty154boSeMB
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7852926761789874749429191889119008009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'search.novartis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19583167453937921319808734014871441511747043838579090018048166787243736850891289935715699468524048852833875439117559089714528495240657821502783868109437231684619409763918184849434187690565901030955289153910103099858038065352960854393059001956479996058128731325101351846079067834849041787657863684571857520378960008512265734552943920629822973392254230764091134314127610347369187571241379692425223731210886717855451045688314323673037330442095818127491425296939296518168720743449821361018410563535268247158553817019543086492289298063638586442743752481795239064393125638347835908469877646091595800387972536613016768283021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							322d057bf856c4fec5a222a904d3690c433c6214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.search.novartis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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