eu.digitalpfizer.com

- Pfizer Incorporated -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:24:5c:3c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Pfizer Incorporated

Organization: Pfizer Incorporated
State / Province: Connecticut
Locality: Groton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:24:5c:3c
Serial Number (int): 1277451324
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 3d:38:4e:97:7d:76:37:4b:11:2b:45:45:7e:d6:69:2c:40:d9:44:e5
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): f6:5a:ec:d0:9f:80:e7:c3:66:68:20:f7:81:a8:e3:0d:59:c3:60:df
Fingerprint (sha256): 0f:6a:17:39:47:bc:65:5b:45:18:6d:e9:21:7b:de:55:5d:52:7e:7d:de:86:e3:54:26:92:a0:63:95:95:f6:57

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate eu.digitalpfizer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu.digitalpfizer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.digitalpfizer.com

Other certificates including the domain name digitalpfizer.com

(limited to 100 certificates)
sni.cloudflaressl.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com

Certificate

The complete raw certificate details for eu.digitalpfizer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CMagBo+/r6WOnos1c33
lSKNNt1TZHIKQgw5E20gM4b9UAPVtW4IPbWZyoZeleDOaZ4BF09K5oHgQNqStbQe
fVwewSP6rOKJwSYcZFLWva6vUQoi03pxsrZh1a39H3E7IAwZu08y31FG5xHbxlnv
GprSibLNxsvxBG5xMyBilU2hXyHDB63tN128d356c7lKDv0cIpNva3bikIJSqajM
lIRNdzm7cjk2QpazTND7nS1g9x/i3LG/ialEXcHEhix4G9iS0YYAEGRZCxtx7ExE
d95wW07yffiKYSHby9QGbZMLlG4WgNpSoUbpzvBlukDu7h4D6v/VkgcaoREAZC0V
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277451324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-01 14:21:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-26 21:51:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pfizer Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu.digitalpfizer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26779830842290112442056692135925408599982503683978637227275868284934848776362037740097885668587350529582840401033087178426380503051208973094892356214041104326156057236051180070844800058553988191290172717738918803201715962346712481369324224233535136379285552445043525000342652246363518239347398066142380053012276180405539565681501805836662307906417710816450990201942773828111607931793163608814465620737888378379730241741619013778133490999401331502914437496296461268177612851721176336218013964490653911267608915050244852695009165555579859123384747138183094867559281651639607851927066928236259177291442102959537059075531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.digitalpfizer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d384e977d76374b112b45457ed6692c40d944e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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