*.sf4.digitalpfizer.com

- Pfizer Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number bb:6b:d9:26:3e:f3:ce:60:00:00:00:00:50:ea:a9:34 was issued on by Entrust, Inc..

With 126 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pfizer Incorporated

Organization: Pfizer Incorporated
State / Province: Connecticut
Locality: Groton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bb:6b:d9:26:3e:f3:ce:60:00:00:00:00:50:ea:a9:34
Serial Number (int): 249125615288679476905264159862628722996
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:03:57:7c:34:8e:e2:a1:e5:33:fb:61:0b:3a:7b:e0:bd:1e:de:f9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 87:17:a8:e7:75:bc:f6:19:6f:e1:03:84:60:ff:45:b4:1b:2f:85:a0
Fingerprint (sha256): 12:4c:2a:be:a5:9f:cb:08:9e:74:71:68:73:ae:67:ec:0f:e9:ed:26:02:3a:dc:94:65:06:50:47:c2:31:e9:ce

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.sf4.digitalpfizer.com

126

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sf4.digitalpfizer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sf4.digitalpfizer.com
centrum.ie
www.centrum.ie
evisit.pfizer.com
www.evisit.pfizer.com
www.getquitclinic.com
getquitclinic.com
pausanapaf.com.br
www.pausanapaf.com.br
www.peeingproblem.ca
peeingproblem.ca
pfizercancertrials.com
www.pfizercancertrials.com
www.phqscreeners.com
phqscreeners.com
thatsgottahurt.net
www.thatsgottahurt.net
unasyn.pfizerpro.com.ve
www.unasyn.pfizerpro.com.ve
advanceresearchawards-chronicpain.com
www.advanceresearchawards-chronicpain.com
hcp.champix.co.uk
www.hcp.champix.co.uk
www.viagramd.ca
viagramd.ca
pfizer.com.vn
www.pfizer.com.vn
tromboprofylaxia.sk
www.tromboprofylaxia.sk
afturnaround.co.uk
www.afturnaround.co.uk
hospira.com
www.hospira.com
hospira.co.uk
www.hospira.co.uk
hospira.ca
www.hospira.ca
hospira.fr
www.hospira.fr
selfservice.digitalpfizer.com
hospira.es
www.hospira.es
hospira.it
www.hospira.it
hospira.com.au
www.hospira.com.au
hospira.de
www.hospira.de
hospira.cn
www.hospira.cn
hospira.com.br
www.hospira.com.br
hospira.co.jp
www.hospira.co.jp
podercrescer.com.br
www.podercrescer.com.br
www.pchpatents.com
pchpatents.com
smallvictories.eu
www.smallvictories.eu
hospira.co.kr
www.hospira.co.kr
protectyourpreciousmoments.co.uk
www.protectyourpreciousmoments.co.uk
www.zapalpluc.sk
zapalpluc.sk
hospira.com.mx
www.hospira.com.mx
tofacitinib-rmp.hu
www.tofacitinib-rmp.hu
es.genotropin.com
mifrak.co.il
www.mifrak.co.il
rxre2018.com
www.rxre2018.com
www.chapstickcolors.com.co
chapstickcolors.com.co
paindetect9xuh3lm.dk
diflucan.by
www.paindetect9xuh3lm.dk
www.diflucan.by
pfizer.sk
www.pfizer.sk
www.xeljanz.com.hk
xeljanz.com.hk
atriajourney.ie
www.atriajourney.ie
productpats.com
www.productpats.com
www.viagra.co.il
viagra.co.il
www.enfermedaddeandrade.com
enfermedaddeandrade.com
lyrica.pfizerpro.com.co
celebrex.pfizerpro.com.co
m.personalmenopauseanswers.com
www.nomasneumonia.es
nomasneumonia.es
lipitora.pfizerpro.com.co
www.daleketreot.co.il
daleketreot.co.il
www.pfizervsavings.com
pfizervsavings.com
xalabrands.pfizerpro.com.mx
www.talkdepression.org
talkdepression.org
www.lipitorchoicepoints.com
lipitorchoicepoints.com
bez-boli.com.ua
www.bez-boli.com.ua
www.magnesia.com.br
magnesia.com.br
www.advisethequit.com
advisethequit.com
lipitora.pfizerpro.com.ve
www.personalmenopauseanswers.com
personalmenopauseanswers.com
lipitorb.pfizerpro.com.co
zithromax.pfizerpro.com.co
lyrica.pfizerpro.com.ve
newspflash.com
www.newspflash.com
advil.nl
www.advil.nl
Nivestym.com
www.Nivestym.com

Other certificates including the domain name digitalpfizer.com

(limited to 100 certificates)
sni.cloudflaressl.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com

Certificate

The complete raw certificate details for *.sf4.digitalpfizer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GlugYp+vKfFM8W6AIrK
QG3QpUeQjsF9tFZyaPOhl/sTiIPBZXa94n0yu26n/pAFMqnw4B0fnvsftUyAaS0b
w/1UQN3Jac4igZs3dP0GsJ3FoqsqZRkBC5/5za664+lqVfT0kl8AP+3GFs988UMz
S1cgihPDvYXSxsziW+k0icX7z5OVvovvRgUWrQ3wQZq0nao5JWH37qiNfycZasdI
ejH2MD1tUoHUAGAvI7tbkcxFxTF+gruX6/rFHcsyHT8lo+hrI8HfGbUUMoiR0CM5
rl2xhvFpsdy8+syGuRgAQ6xXcY6GiecApNMlB7A/8HJWycOSxoobWu2X2hxhRR5L
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249125615288679476905264159862628722996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 19:00:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 19:30:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pfizer Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sf4.digitalpfizer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27319464163960166745247507047110462789620779710331629862767557887658347662614036792522168706387499249331774185660528888383277420818812693735428650593503261740814056584861721241853105127472374996735902253543326951652670701312383884408354250179351650861552028271401647237938243354496827562588361058942123996859844547659076404541947741749500072745956102226914993577060599635214146313324451933657545721502247573780567192616162794680434977677828512244779541057236957229816647421886781253043830468162049018186442776605921940039137333596246813935971989269912228431548969157718104593196868482643399798136445081307634254891837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sf4.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrum.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrum.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evisit.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evisit.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getquitclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getquitclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pausanapaf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pausanapaf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peeingproblem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peeingproblem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizercancertrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizercancertrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phqscreeners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phqscreeners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatsgottahurt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatsgottahurt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unasyn.pfizerpro.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unasyn.pfizerpro.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceresearchawards-chronicpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advanceresearchawards-chronicpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcp.champix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp.champix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viagramd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viagramd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizer.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tromboprofylaxia.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tromboprofylaxia.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afturnaround.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afturnaround.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.digitalpfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podercrescer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podercrescer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pchpatents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchpatents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallvictories.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smallvictories.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectyourpreciousmoments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectyourpreciousmoments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zapalpluc.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapalpluc.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospira.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospira.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tofacitinib-rmp.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tofacitinib-rmp.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.genotropin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mifrak.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mifrak.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxre2018.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxre2018.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapstickcolors.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapstickcolors.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paindetect9xuh3lm.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diflucan.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paindetect9xuh3lm.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diflucan.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizer.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xeljanz.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeljanz.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atriajourney.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atriajourney.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productpats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productpats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viagra.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viagra.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfermedaddeandrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfermedaddeandrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyrica.pfizerpro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrex.pfizerpro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.personalmenopauseanswers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomasneumonia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomasneumonia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipitora.pfizerpro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daleketreot.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleketreot.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfizervsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizervsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xalabrands.pfizerpro.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talkdepression.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkdepression.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lipitorchoicepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipitorchoicepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bez-boli.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bez-boli.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnesia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnesia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advisethequit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisethequit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipitora.pfizerpro.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalmenopauseanswers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalmenopauseanswers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipitorb.pfizerpro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zithromax.pfizerpro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyrica.pfizerpro.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newspflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newspflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advil.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advil.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Nivestym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Nivestym.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a03577c348ee2a1e533fb610b3a7be0bd1edef9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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