adfs.perrigo.com

- Perrigo Company -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 09:98:06:b5:77:5f:ff:2c:d3:66:d7:89:e6:a3:2e:40 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Perrigo Company

Company registration number: 800226568
Organization: Perrigo Company
Organization unit: IT&S
State / Province: Michigan
Locality: Allegan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:98:06:b5:77:5f:ff:2c:d3:66:d7:89:e6:a3:2e:40
Serial Number (int): 12752417156261342799484970829030305344
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 70:0d:9d:ef:1f:6e:b1:3d:97:40:7a:66:ee:21:8f:f0:e8:e4:03:47
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 72:e1:85:f1:08:31:58:62:8f:13:f8:f1:75:f5:8e:ae:57:2e:29:fd
Fingerprint (sha256): 2c:2d:11:29:09:41:89:40:d0:a9:c1:41:75:cf:df:76:5f:c1:90:f9:9e:ce:df:0c:dd:84:6f:7d:e4:43:e2:e5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate adfs.perrigo.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.perrigo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.perrigo.com
adfsweb.perrigo.com
certauth.adfs.perrigo.com
enterpriseregistration.perrigo.com

Other certificates including the domain name perrigo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for adfs.perrigo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12752417156261342799484970829030305344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800226568'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allegan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Perrigo Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT&S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.perrigo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691072520078660865122808860499927093493813670670156384874677872897894566327871911867160376965326938090458809578807433946720193386328207815499259218124044296424972064563911833317565708798502749095431835209217592201293719523211954876263183765247112676464991360936725602693195167712149460842563488868926225172495001030649338171717929350796496243975977927775915006548237163197625706591193112108689783108575763701913376392996090183000653901652250738703116140161654588353751797854363488777447923234995566931470506281164198433926653170993455093124062723565203409161645469175681786866915970390747160127815145915725202498960272055685872497788030227972649848131913922204011574722112207457265336691490680676865088689044886842871329971513664139050952907932365771882416577867814736388203006568016549297972954616673061659211133206367170484297521301983868538346763491506729044678930712869528956832336498161730563831535636896346650097427413724817024910863959376107822346215971729015506204079888391029772728526548716530322743237743520796087086799072206325871787773139185505775882341874191921751329864746536933728857960720636052931379611886272907793296239206961313009861151767659639732739240680310717785231075079368030655044283129084435516069309916371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							700d9def1f6eb13d97407a66ee218ff0e8e40347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsweb.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.adfs.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.perrigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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