adfs.perrigo.com

- Perrigo Company -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 09:9f:4e:c4:cc:22:b7:16:28:02:34:5a:57:30:db:3f was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Perrigo Company

Company registration number: 800247967
Organization: Perrigo Company
Organization unit: IT&S
State / Province: Michigan
Locality: Allegan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9f:4e:c4:cc:22:b7:16:28:02:34:5a:57:30:db:3f
Serial Number (int): 12790224782417128158372799131648318271
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1b:d9:a2:fa:49:a9:d2:96:1d:be:67:04:b3:63:90:91:d3:98:c0:ba
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): d5:9e:ca:80:96:f1:af:8c:41:e9:6f:17:6d:f3:26:fe:ae:b7:78:83
Fingerprint (sha256): 31:a8:63:41:c0:98:7a:bf:d8:d0:c5:ab:4a:db:48:e4:59:b6:db:4b:be:02:b8:a1:44:ff:5b:1d:ac:6b:a0:6b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate adfs.perrigo.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.perrigo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.perrigo.com
adfsweb.perrigo.com
certauth.adfs.perrigo.com
enterpriseregistration.perrigo.com

Other certificates including the domain name perrigo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for adfs.perrigo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12790224782417128158372799131648318271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800247967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allegan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Perrigo Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT&S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.perrigo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804413744001878668156517714463955211078801405132051634959646429770643742741230188044256674382868730298118045090353465026747652379062400799898365244420676406850349438863080914736764737714450844875501811941036698554168710093432372150572250521245404680444525040412860667795289536561730087459938732218649257155831224637993408743294198511880153631002731616869101363329088341997686915753419733224165128770169706714154411540225020726805450992714497453594718559836213603501203936410036546110061793332904019504407774467003043332534949897726926143399853095234667812861182757161446036737683242518210008429727878566909049912934884901006557582634083940334189679356491545034930073278875604941005276682650731125591664611969811515674403137980157567464466470272008923946814486207014629542832577043581980371907624762547022713878587422298794070759537822927682248490427111369078992366349823940523622569338810098219450836233564067059192255327055721901377343586046994070777508366470017012703018890621094123544503587754109517342536300664897806306362404251691303341397778846224956216354718835782862122760032511269108856576080435764407490671225030454421191146490962614945811380947344973423973291787825987257746984747569738115181139310107444198498801597276537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bd9a2fa49a9d2961dbe6704b3639091d398c0ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsweb.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.adfs.perrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.perrigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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