novartis.com

- Novartis Pharma AG -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:78:8b:10:e2:f2:00:ba:70:b8:37:0c:08:88:0e:64 was issued on by DigiCert Inc.

With 108 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novartis Pharma AG

Organization: Novartis Pharma AG
Locality: Basel
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:78:8b:10:e2:f2:00:ba:70:b8:37:0c:08:88:0e:64
Serial Number (int): 19235088156834685053682714522904170084
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d3:ef:00:52:01:9a:25:2a:90:ae:ec:7e:46:0c:da:ca:18:41:1b:66
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): c1:b9:85:3b:96:06:6a:73:e9:41:40:ac:f5:81:8a:3a:f3:89:fc:89
Fingerprint (sha256): 18:9c:62:ec:18:c5:26:c2:04:6f:17:f1:37:26:9d:2e:b8:08:8d:38:e3:0d:8e:07:d9:23:8b:e7:a0:ac:3c:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate novartis.com

108

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novartis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

novartis.com
www.novartis.com
www.financial.novartis.com
nibr.com
www.nibr.com
th.novartis.com
webmail.novartis.com
www.careers.novartis.com
www.collaboration.novartis.com
www.corporatecitizenship.novartis.com
www.ediary.dev.novartis.com
www.gnf.nibr.com
www.locations.novartis.com
www.nibr.novartis.com
www.novartis.at
www.novartis.ch
www.novartis.com.au
www.novartis.com.cn
www.novartis.com.ec
www.novartis.com.pe
www.novartis.com.ve
www.novartis.cz
www.novartis.de
www.novartis.ec
www.novartis.fr
www.novartis.in
www.novartis.no
www.novartisoncology.com.tr
www.novartisoncology.de
www.novartisoncology.jp
www.novartisoncology.us
www.novartis.pt
www.pharma.novartis.com
www.th.novartis.com
www.virtualhouse.novartis.com
careers.novartis.com
corporatecitizenship.novartis.com
locations.novartis.com
nibr.novartis.com
nitd.novartis.com
novartis.ch
www.novartis.es
www.novartis.hu
www.novartisoncology.com.au
www.novartisoncology.es
www.novartisoncology.nl
collaboration.novartis.com
www.novartisoncology.com
www.novartis.se
www.novartis.it
www.novartis.com.mx
www.novartis.com.ro
www.novartis.co.uk
www.novartis.dk
www.novartis.fi
www.novartis.ca
prod.gnf.nibr.com
www.novartis.be
www.novartis.nl
www.novartis.com.ar
www.novartis.ie
prod.financial.novartis.com
www.cn.novartisoncology.com
prod.cn.novartisoncology.com
www.novartis.pl
www.novartis.co.il
www.novartis.com.tr
www.novartis.co.za
www.novartis.bg
www.novartis.com.br
www.cac.novartis.com
prod.cac.novartis.com
www.novartis.com.eg
www.novartis.gr
www.novartis.ru
www.novartis.pk
www.farmanova.com.tr
www.id.novartis.com
prod.id.novartis.com
prod.novartis.com.cn
www.novartis.sk
www.novartis.co.jp
www.novartis.com.hk
www.novartis.com.tw
www.novartis.com.ph
www.novartis.co.kr
www.beluga.novartis.com
prod.beluga.novartis.com
www.novartis.com.my
www.andino.novartis.com
prod.andino.novartis.com
www.novartis.lv
andino.novartis.com
www.saludhable.novartis.com
prod.saludhable.novartis.com
www.oncologypipeline.novartis.com
prod.oncologypipeline.novartis.com
www.report.novartis.com
prod.report.novartis.com
prod.groupdigital.novartis.com
www.groupdigital.novartis.com
www.novartisfoundation.org
prod.zorgverlener.novartis.nl
www.zorgverlener.novartis.nl
www.antwortgeber.de
www.novartis.ee
www.novartis.rs
www.novartis.com.bd

Other certificates including the domain name novartis.com

(limited to 100 certificates)
www.ngcs.novartis.com
www.genoptix.com
dailiestotal1.dailies.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
incapsula.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
sni.cloudflaressl.com
novartis.com
gwhost2.novartis.com
www.ngcs.novartis.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
sni.cloudflaressl.com
novartis.com
ocb.novartis.com
live.novartis.com
vanity6.jiveon.com
xolair.co.uk
ssl384476.cloudflaressl.com
ussv.cvpn.novartis.com
novartis.com
collab-edge.cdn.securityforward.net
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.genoptix.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vanity6.jiveon.com
sni.cloudflaressl.com
san-14-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
medhub.com.au
image.e.atmosphere.tv
image.email.novartis.es
prod.oncologypipeline.novartis.com
join.novartis.com
novartis.com
hcp.novartis.com
sni.cloudflaressl.com
san-1-s7.tlsprovisioning.exacttarget.com
incapsula.com
sni.cloudflaressl.com
image.20210419.200456.s7.et.yellsatcloud.com
incapsula.com
sni.cloudflaressl.com
speakeralliance2.novartis.com
external-trd-tst.novartis.com
novartis.com
retired.novartis.com
sni.cloudflaressl.com
ssl384476.cloudflaressl.com
ssl384477.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
search.novartis.com
vanity6.jiveon.com
sni.cloudflaressl.com
vanity6.jiveon.com
san-5-s7.tlsprovisioning.exacttarget.com
ssl384478.cloudflaressl.com
sni.cloudflaressl.com
www.pharma.us.novartis.com
novartiscorp.novartis.com
id.novartis.com
incapsula.com
www.iportal-qa.novartis.com
www.genoptix.com
sni.cloudflaressl.com
medhub.com.au
www.genoptix.com
prod.novartis.com
xolair.co.uk
sni.cloudflaressl.com
www.us.state.lookup.novartis.com
www.portal.novartis.com
www.my.novartis.com
www.pki.novartis.com
www.genoptix.com
sni.cloudflaressl.com
san-5-s7.tlsprovisioning.exacttarget.com
yammerstream.novartis.com
am1023dl50pl1.023d.dedicated.lync.com
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
image.email.novartis.es
svisitor.pharma.us.novartis.com
view.engage-us.novartis.com
usbrc.novartis.com
oak.novartis.com
www.us.state.lookup.novartis.com
www.ophthalmic.novartis.com
*.jiveon.com

Certificate

The complete raw certificate details for novartis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkztTvpX5HhLvMZsQQjd+
rCn/YEODi57wDOycqHVuOLJsw0cjxOkTuFjomgBQKdUBpFTicMWIcAMp4+QRKdkf
INrWC8ZCxqokIXDOGhrGvcGGu21sjtl2oNnUi27IBhU6ud06pQVG3kazmV2AVJFW
AbghXKlXwBPYitwB7tk79SsM1zChOWMtocwMY+iVd6POeMulY+Hi7BRmlZi3WbBw
f6KNj4pkEZ+IQsNl59fwNB8BK9rxGp4dYorQFWAePLA+P09SwZc4o+b4KMLCL3it
xUABNw9OXBZIq5xKlqWOtT4gYzXXigwWoIiPeUuz12Zzro6/UsbxmftuSyI+mXZr
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19235088156834685053682714522904170084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novartis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18586286126624635151813273118396798305967488949534063310078969776056655857268415625274823592128959298442149243277359936096804741159298214845973958086954310989049680787844116367329350449506123389146484343742791454024519222517335464336866586253577181795739792631095786715717922749524320065024898949670509183942031441733217418465454060354808654028409480874281698527950915492945778071819733277196510402723403278641318371824841184357028407567765103586778594299497680414195480952672230869576269101464766868377567341551001114504659184096244333478863078399416295212325629610154736244262523988429416473923173692221253871889349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3ef0052019a252a90aeec7e460cdaca18411b66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financial.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collaboration.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatecitizenship.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ediary.dev.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnf.nibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locations.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nibr.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.th.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualhouse.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatecitizenship.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibr.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitd.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gnf.nibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.financial.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cn.novartisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cn.novartisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cac.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cac.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmanova.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.id.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.id.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.novartis.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beluga.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.beluga.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andino.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.andino.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andino.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saludhable.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.saludhable.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oncologypipeline.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.oncologypipeline.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.report.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.report.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.groupdigital.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groupdigital.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.zorgverlener.novartis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zorgverlener.novartis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antwortgeber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.com.bd'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016565bd87d20000040300483046022100e4d6a1d3ca57794211b53adec09d8a105b14122390a4cbaae9e10af8376f7915022100dcce764f5707274c6dc9d455e3ff4912425ccca8c5c122fc68caa22c1dd2e3ea0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016565bd88a20000040300483046022100954a9a1a144355b85dcfb2de8bbe1e3d1731d439a8e0cb8a3c9218d0081d8007022100e742d578e31b8527dd66cfac3a64f5c9c7c9e78932241bcb87955e4027f2d985
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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