imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q1

About this certificate

This digital certificate with serial number 01:a6:97:6c:6b:1d:55:d7:1d:10:be:1f:d2:5c:68:e5 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a6:97:6c:6b:1d:55:d7:1d:10:be:1f:d2:5c:68:e5
Serial Number (int): 2194220507943760470970494826246334693
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:e7:20:c7:2c:b2:b8:54:aa:7e:32:7e:0b:6e:e7:e2:4f:24:78:41
AuthorityKeyId: 9c:2a:67:d0:b4:83:31:5b:80:cb:29:96:55:75:09:37:38:b8:3c:a5

Fingerprint (sha1): 9d:3e:82:79:1e:a9:02:b4:07:d9:c9:62:7d:12:f2:88:2e:8a:93:7e
Fingerprint (sha256): 58:a2:d1:72:b3:35:19:5f:30:11:7f:91:bc:36:34:3c:26:c1:e2:69:bc:35:92:de:cd:45:4a:ad:13:87:fc:43

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl

Check the revocation status for certificate imperva.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synasupport.ie
*.activatethecard.com
qa.mhiapps.com
rsc.mms.mckesson.com
aimovigfreetrialoffer.com
activatethecard.com
mckessonspecialtyhealth.com
cvo.mckesson.net
*.changetes.com
dsi.rxoptimization.com
rsc.dev.mms.mckesson.com
usoncology.com
www.aveedrems.com
dev.orbits.mckesson.com
*.mhiapps.com
mms-st.mckesson.com
*.mckessonqa.com
tab.rxoptimization.com
secure.mms.mckesson.com
www.psstxt.info
*.pharmacyservices.mckesson.com
*.celesiocorp.net
demo.mhiapps.com
*.practicefocus.mckesson.com
in.simplymedical.com
www.siliqrems.com
*.paragardbvsp.com
*.mba.mckesson.com
*.mckessonperformancebenchmarks.com
*.northstarhealthcare.ie
*.cork.mckesson.com
mc.connect.mckesson.com
reports.mhiapps.com
*.oneaccess.sterlingmedical.com
psstxt.info
www.enhancedpatientsupport.com
dev.mckdirect.mckesson.com
*.simplymedical.com
imperva.com
*.mckessonspecialtyhealth.com
mygsonline.com
aveedrems.com
dev.mms.mckesson.com
extuser-uat.rxoptimization.com
*.rxservices.mckesson.com
www.aimovigfreetrialoffer.com
*.reports.mckesson.com
dev-secure.mms.mckesson.com
mooremedical.com
mycareplusonline.com
uat.api.mms.mckesson.com
*.usoncology.com
api.mms.mckesson.com
paragardbvsp.com
mba.mckesson.com
sterlingmedical.com
www.mhiapps.com
*.rxoptimization.com
rxo.rxoptimization.com
support.gilenya.com
*.supplier.mckesson.com
secureqa.mooremedical.com
siliqrems.com
test.mhiapps.com
wwwtest.rxoptimization.com
enhancedpatientsupport.com
prodordasset.connect.mckesson.com
mshusontest.com
*.mycareplusonline.com
dev.simplymedical.com
rxoptimization.com
mckessonperformancebenchmarks.com
*.clarusonesourcing.com
*.mygsonline.com
qa.mba.mckesson.com
*.mooremedical.com
*.oneaccess.mckesson.com
*.sterlingmedical.com
dev.mhiapps.com
secure.mooremedical.com
simplymedical.com
mypss.com
pricingdev.mms-st.mckesson.com
riskmanager.mckesson.net
*.dev.supplier.mckesson.com
*.mckesson.com
www.myspportal.com
*.dev.reports.mckesson.com
*.mypss.com
pay-dev.mms.mckesson.com
extuser.rxoptimization.com
images.mooremedical.com
www.synasupport.ie
portal.api.mms.mckesson.com
copayhelp.mckesson.com
myspportal.com
*.copayqa.novartispharma.com
mhiapps.com
*.iknowmed.com
cr.mckesson.net
pay.mms.mckesson.com
ipsencaresportal.biologicsinc.com
dev01.mms-st.mckesson.com
*.dev.oneaccess.mckesson.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXT8ARCOoXPIlx4qL1F1
50m9GUt6vbL8jJnZbhLQF27Z6UfqoSCbKy0R4CDgovz3yQJMU1XwW2cGoyqn1ihT
D2vRPougg2NbWL6542phCfGNzLO881D9HUOO7bDZwGMuJYJerieln5fdTHahtKnI
eKgZ0Vjz0INBC4W8dDBXx1VPeIAkIpsI62Z79yo5PO1tSHBVKdcYFgO1bkStw4dA
fA38m7Vo8irCglHAGohL738bKZlRw+hBvBjaRP9zSYmmpMsQ67yx0jCp4arZqZRt
ClZv075nT2n1PyOkzS+GLiIQSyEMyzID6SYBTXYEzpp9k2yH+p+JPC9YHnASArRA
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2194220507943760470970494826246334693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 19:26:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 10:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19372147813159859370943307611520018064328311070772754023241018433267375278931097672162146647225921392695164506757667027684072282445203199278920427897583444788749605711660533436797532017714719300590338385032157559300132964868614668777697519497003350467376334548734873841675429395818698790667653269206523341406662418209632660039363656959897914103366533462116205261827561134668222901484177361338681564857458610520385077384033862067889739378262278930947873293054475544474745674560843372183396546570878116032549142602418588463625178977132470323878206091278246907290090988720102181330050026116934669415074975013799686586623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synasupport.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activatethecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsc.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimovigfreetrialoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activatethecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckessonspecialtyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvo.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsc.dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveedrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.orbits.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tab.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psstxt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmacyservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celesiocorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practicefocus.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siliqrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paragardbvsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonperformancebenchmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northstarhealthcare.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cork.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.connect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneaccess.sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psstxt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enhancedpatientsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mckdirect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckessonspecialtyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveedrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extuser-uat.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxservices.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimovigfreetrialoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reports.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-secure.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareplusonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragardbvsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxo.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliqrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtest.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancedpatientsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodordasset.connect.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mshusontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycareplusonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckessonperformancebenchmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarusonesourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mba.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneaccess.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterlingmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricingdev.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskmanager.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.supplier.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myspportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.reports.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-dev.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extuser.rxoptimization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mooremedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synasupport.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.api.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copayhelp.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myspportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copayqa.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iknowmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr.mckesson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.mms.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsencaresportal.biologicsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01.mms-st.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.oneaccess.mckesson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ece720c72cb2b854aa7e327e0b6ee7e24f247841
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9c2a67d0b483315b80cb29965575093738b83ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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