incapsula.com

- Incapsula Inc -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3b:70:d0:5a:2b:9f:b7:68:15:17:d2:b6 was issued on by GlobalSign nv-sa.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Incapsula Inc

Organization: Incapsula Inc
State / Province: Delaware
Locality: Dover
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:70:d0:5a:2b:9f:b7:68:15:17:d2:b6
Serial Number (int): 18395999186835033764979528374
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a6:f8:64:d1:79:f5:92:89:3d:93:f9:30:51:e0:dc:2f:09:1c:ae:36
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): e7:02:f4:6e:f6:c7:a4:af:8a:99:32:f4:16:28:fd:fc:7e:9f:35:04
Fingerprint (sha256): 59:0f:28:49:e7:a1:f1:63:71:63:72:cc:f8:1a:af:76:26:50:7b:44:dd:f6:da:c0:86:c5:88:8c:e8:b5:2c:a6

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate incapsula.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incapsula.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incapsula.com
*.annualreview.novartis.com
*.betterconversations.novartis.com
*.cardservices.novartis.com
*.ciprodexhcp.com
*.cpa.novartis.com
*.customer.us.pharma.novartis.com
*.entresto.com
*.exelonpatch.com
*.extavia.com
*.factsaboutaxspa.com
*.focalinxr.com
*.focalview.com
*.gilenya.com
*.ilaris.com
*.irmadashboard.novartis.com
*.locatorservices.novartis.com
*.monsuivismp.com
*.ncc.novartis.com
*.non-us.kymriah.com
*.novartis.net
*.novartispharma.com
*.nvfund.com
*.offerallocation.novartis.com
*.oncologyaccessnow.com
*.portal.novartis.com
*.realityofspa.com
*.sandoz-biosimilars.com
*.sandoz-hospitalproducts.com
*.services.novartis.com
*.servicesgreen.novartispharma.com
*.sjiasupport.com
*.supplierconnect.novartispharma.com
*.survivehives.com
*.todaymyway.com.au
*.us.keepitpumping.com
*.us.state.lookup.novartis.com
*.xn--espaciomigraa-tkb.cl
cardservices.novartis.com
ciprodexhcp.com
commercialredirect.novartis.com
customer.us.pharma.novartis.com
entresto.com
exelonpatch.com
extavia.com
factsaboutaxspa.com
focalinxr.com
focalview.com
gilenya.com
ilaris.com
irmadashboard.novartis.com
locatorservices.novartis.com
monsuivismp.com
ncc.novartis.com
novartispharma.com
nvfund.com
offerallocation.novartis.com
oncologyaccessnow.com
portal.novartis.com
realityofspa.com
sandoz-biosimilars.com
sandoz-hospitalproducts.com
services.novartis.com
sjiasupport.com
survivehives.com
todaymyway.com.au
us.keepitpumping.com
xn--espaciomigraa-tkb.cl

Other certificates including the domain name incapsula.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for incapsula.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncF96FfIx7GuFD8K2232
7IYr+njYlmcEIonh0+v6SagbiR59F+mst4Z2HGUMI9ttw/aA8L+RVxfXLxamEbMF
02TqhB+mKeT0JFfiiUL8EN0IJOHnfrTTHvBnUJgnG9BpfNEd9NEr55CkXyOgAebt
BrehJ83R7/OmrpFUaOoPjVBEvPLJHY4Da38i9+bB3DIwVen4qiqJoDlnHbvguPSr
l4mu5siacR1abAHnxtKSuNl9Ta3jJ/I2izJOlolJquEKNiTFgU86eZ6AFi6sk/hy
vj+wd5nkbK/zFnP7YhMqYLrmwWvHzPbPT6t52YzETDJuCuiIbjgx+7zusw1TnhZ4
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18395999186835033764979528374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 19:15:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 00:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Incapsula Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incapsula.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19914828255471399063050127571334115372219381473843694946824704034750571748493758954939916632357071561003042596189626136294075649801880838966005440565313939279010329912568385568959814641620828552142389134107525316667265303909174678224413749022826827805333419208151811200440591055796998691112135647496148217370056668273617201788027182780888983061527178821698993431995030867697227260362974140821293363432727750199296005830247367585752805201492544563136535045338752732013135557774364345526114769057650415486708162131468812304652121457167651433889576139145409588516674339086508832921583553986718950499449216962366482577497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annualreview.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterconversations.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciprodexhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpa.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer.us.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factsaboutaxspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irmadashboard.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locatorservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monsuivismp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncc.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-us.kymriah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offerallocation.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandoz-hospitalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicesgreen.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplierconnect.novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivehives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.keepitpumping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.state.lookup.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--espaciomigraa-tkb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciprodexhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialredirect.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.us.pharma.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelonpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factsaboutaxspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalinxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focalview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irmadashboard.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locatorservices.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsuivismp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncc.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartispharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offerallocation.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncologyaccessnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityofspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-biosimilars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandoz-hospitalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjiasupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivehives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaymyway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.keepitpumping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--espaciomigraa-tkb.cl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6f864d179f592893d93f93051e0dc2f091cae36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001774a6bb0b80000040300473045022027a6f8735c631318a79ca5a82fff6deece12625c260fea0ab3491b557a3fa708022100ee79e376e1ae2ce9a7d73fe80fc57761d7c12b6982698ffd6993a5d6c57e0b350076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001774a6bb0d5000004030047304502202018e8a37d9b69a004d298914767fe200b10546f5bdf24699c64eb1f2784cba1022100a3c4ee472af0614e453a27356d491c98d9dae53a462d49673513765fea276e84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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